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BREAKING DOWN THE 
BARRIERS THAT WOMEN 
FACE IN OPEN SOURCE 

BY DAVID WORTHINGTON 

The Free Software Foundation (FSF) is acting to implement 
strategies to broaden the participation of women in the free and 
open-source software community (FOSS). 

Recommendations for removing barriers and broadening 
membership among women in open-source projects were pub- 
lished July 16 by the FSF's Women's Caucus, which was formed 
nearly a year ago and was tasked to devise solutions to address the 
problem. 

The Women's Caucus also found that finances were more like- 
ly to be an obstacle for women than men (in terms of being able 
to donate to open-source projects), and that young girls were not 
being exposed to FOSS software in K-12 education. 

Several of those findings mirror research compiled by Teresa 
Dahlberg, director of the Diversity in Information Technology 
Institute at the University of North Carolina at Charlotte. She 
found that isolation is a key factor for a higher attrition rate in pro- 
gramming jobs among women and minorities. 

People tend to associate with "like communities," where peo- 
ple have similar backgrounds and interests, Dahlberg explained in 
a previous interview. She also cited personal interviews conducted 
by Carnegie Mellon University where women felt that they had 
less room for error than men. 

The FSF views itself as being in a conundrum, because it has 

continued on page 21 ► 



Black Hat forum exposes 
software security issues 

WS standards support a push to interoperability 



BY DAVID WORTHINGTON 

The Software Assurance Forum 
for Excellence in Code (SAFE- 
Code) engaged with developers 
at the Black Hat Technical Secu- 
rity Conference in a brainstorm- 
ing session to clarify a vision for 
software security over the next 
decade. 

More than 50 Black Hat atten- 
dees participated in the session, 
held in July. SAFECode Members 
include Adobe Systems, EMC, 
Juniper Networks, Microsoft, 
Nokia, SAP AG and Symantec. 

The No. 1 issue was education 
and training, said Steve Lipner, 
senior director of security engi- 
neering strategy at Microsoft and 
SAFECode board member. The 
discussion focused on how to get 
new graduates and entry-level 
developers to be prepared to 
write secure code, or even be 
aware of the need to write secure 
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code, he observed. 

Some specific suggestions 
included adding software security 
classes to university curricula; 
getting universities to "push 
back" against employers that are 
more interested in applicants that 
know about new technologies but 
might not be able to create 
secure code; requiring develop- 
ers to have security certifications 



to write code; and establishing a 
mindset for secure development. 

"I don't see this as very realis- 
tic," said Rex Black, president of 
Rex Black Consulting, a security 
group. "Academics telling practi- 
tioners how to do their job is not 
something that has traditionally 
gone down well in software engi- 
neering. What would be prefer- 
able, in my mind, would be for 
software and systems vendors to 
have the same kind of legal liabili- 
ty that vendors of other products — 
e.g., cars, airplanes, microwave 
ovens — have for the quality and 
safety of their products." 

One attendee said that the 
security needs are different 
everywhere, and different compa- 
nies have different requirements 
that can't be covered in a course. 
Lipner said that most members 
on the panel have a policy in place 
continued on page 21 ► 



JRuby lays groundwork for optimizations 



BY ALEX HANDY 

JavaOne has been moved to 
coincide with Oracle's annual 
OpenWorld conference in Sep- 
tember, so as a result, the JRuby 
team at Engine Yard has had a 
few more months to prepare for 
their planned release of JRuby 
1.6. 

Thomas Enebo, co-creator of 



the JRuby project, said the pro- 
ject has been progressing nicely. 
As JRuby allows Ruby applica- 
tions to run on top of a JVM, it 
includes a few workarounds, 
such as those to allow JDBC to 
work with Ruby applications. 
Version 1.6 is now laying the 
foundations for the removal of 
those workarounds, thanks to 



hooks being placed in the Open- 
JDK (Java SE 7) that should 
allow for easier development of 
interpreters for other languages 
running on top of the JVM. 

"The OpenJDK is going to 
have support for invoking dynam- 
ic dispatch at a byte-code level," 
said Enebo. "It should be faster, 
continued on page 21 ► 
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At 1.0 r CouchDB brings peer-based replication 

'Incorruptable' NoSQL database uses crashes as standard means of termination 



BY ALEX HANDY 

Mobile devices and the move to 
the cloud have combined to 
form problems for which tradi- 
tional SQL databases are unsuit- 
ed. This is why the NoSQL 
movement has sprouted dozens 
of newly crafted databases for 
every imaginable problem. 

For the Apache Foundation s 
CouchDB, replication and sta- 
bility were the first priorities. In 
July four years of work culminat- 
ed in the release of Apache 
CouchDB 1.0, bringing with it 
the security features needed for 
enterprise applications. 

Damien Katz created 
CouchDB after leaving the 
Lotus Notes team. He used that 
experience to build a document 
database that could perform 
peer-based replication, along 
with a ground-up approach to 
tolerating node failure. 

Version 1.0 puts the finishing 
touches on CouchDB s under- 
pinnings, said Katz. Key to the 
purpose of the database is repli- 
cation on a reliable and grand 
scale. Any node of a CouchDB 
cluster can be written to, and 
those changes will automatically 
trickle out to the other nodes, 
even if they are turned off. And it 
doesn't matter how those nodes 
were turned off; Katz said that 
CouchDB is built to crash. 

That's because the only way 
to turn off a CouchDB instance 
is with the Unix "kill" command. 
This is what the code does itself 
when a CouchDB instance is 
turned off. Katz claimed that, 
because CouchDB is designed 
to suddenly stop running, it can 
never corrupt the data it stores. 
It may sound unorthodox, but 
using a crash as the standard ter- 
mination means there may be no 
way to surprise CouchDB. 

"The replication stuff is the 
killer feature of CouchDB," 
said Katz. "A lot of databases 
have some sort of replication 
capability, almost always mas- 
ter/slave, so reads can be spread 
across servers to reduce the 
read load. CouchDB uses peer- 
based replication, so any update 
can happen on any node and 
automatically replicate out. We 
have the ability to take a data- 
base offline so it's not connect- 
ed to its other replicas, individ- 
ually query it, then push that 
back to the replicas. It's fairly 
unique in the database world." 




From left: Couchio's Nitin Borwankar, Damien Katz, Claire McCabe, Russell Wood and Aaron Miller. 



GOING WITHOUT SCHEMAS 

Katz has since founded Couchio, 
a company based in downtown 
Oakland and tasked with creat- 
ing office productivity software 
on top of CouchDB. Along the 
way, he's seen the project used in 
interesting new ways. 

"There are lots of businesses 
building on top of CouchDB," 
said Katz. "Some use it for ana- 
lytics, some use it for large con- 



tent management." 

No matter what the database 
is used for, the fact that it does 
not use a schema saves develop- 
ers time and energy, he said. 

"We're schema-less. We 
have the ability to add new 
types of data into an existing 
database without having to 
change the schema," said Katz. 

That helped when a user 
decided to build a real estate 



application on top of CouchDB. 
Because each real estate territo- 
ry is different, the information 
held on each listing is also differ- 
ent. Florida homes might list the 
status of a house's air condition- 
ing, while a house in Kansas 
might be listed with its distance 
to the nearest tornado shelter. 

In a traditional schema-based 
database, each separate item 
would require its own definition 



and column in the database. 
That means more work for the 
DBA every time a new region's 
information is poured into the 
database. But CouchDB, said 
Katz, can handle new data and 
new data types at any time. 

For the future, Couchio and 
the contributors at the Apache 
Foundation are pushing 
CouchDB onto mobile devices. 
Katz said there is already a com- 
piler for the Android platform, 
and that the iPhone will be next, 
followed by BlackBerry. 

As for the project's status at 
the Apache Foundation, Katz 
said that the non-profit is a key 
part of the overall CouchDB 
plan. Specifically, the Apache 
Foundation serves as a buffer 
against patent trolls, he said. 

"Apache is fantastic. In gen- 
eral, one of the biggest benefits 
Apache gives us is legal protec- 
tion," said Katz. 

"There have been lawsuits 
from a company called Visto, 
which has sued some other 
mobile companies about similar 
sync and replication technology. 
But being a part of Apache, that 
makes it really hard for us to get 
sued. The Apache Foundation 
is really about making sure 
these projects are safe." I 



Mainframe gets a modern interface 

IBM introduces zEnterprise, which unifies dev and testing across tiers 



BY DAVID WORTHINGTON 

IBM is attempting to reinvent 
big iron with zEnterprise, a 
new systems design that allows 
workloads on its mainframes 
and blade servers to share 
resources and be managed as a 
single virtualized system. 

What's more, IBM has uni- 
fied development and testing 
across tier architecture, and has 
offloaded development work 
from the mainframe. 

Big Blue announced the 
zEnterprise mainframe server 
in July. The system's design 
combines the zEnterprise 
mainframe with new IBM soft- 
ware (IBM zEnterprise Blade- 
Center Extension and the IBM 
zEnterprise Unified Resource 
Manager) that enable it to man- 
age workloads running across 
System z, and select POWER7 
and System x systems. 

IBM said that unified sys- 



tems management will reduce 
the cost and complexity of man- 
aging IT infrastructure, which 
may operate in silos, requiring 
different staff and software 
tools to manage them. 

IBM Rational Developer for 
System z uses the same ID for 
both mainframe and Java work, 
providing a common view for 
developers that improves com- 
munication, said Scott Searle, a 
marketing program director for 
IBM Rational. A new System z 
Unit Test feature allows devel- 
opers to work outside of the 
mainframe environment. 

Developers can run z/OS on a 
laptop or on an X86 server, Sear- 
le said. Other benefits include a 
modern GUI and being able to 
work at any time, not just when 
there is a mainframe mainte- 
nance window, he said. "[Devel- 
opers] can do everything but the 
final runtime check." 



This, the company said, is a 
major improvement over appli- 
cation maintenance using green- 
screen Interactive System Pro- 
ductivity Facility development 
tools, which can be difficult to 
do, and organizational knowl- 
edge may be lost over time. 

Together, zEnterprise tech- 
nologies provide for unified 
management of applications 
spanning mainframes, Unix 
(IBM Power) systems and x86 
servers. IBM has also added sup- 
port for new mainframe work- 
loads running on specialty 
processors, including the IFL 
(Integrated Facility for Linux) 
specialty processor and a proces- 
sor to accelerate Java-based 
workload performance. 

"New applications will inher- 
it the benefits of mainframe- 
enforced security software and 
high-availability features," said 
IDC research vice president 



Jean Bozman. Nothing would 
prevent a customer from using a 
zEnterprise mainframe as a 
server in the cloud, she added. 

A new CICS deployment 
assistance tool for z/OS pro- 
vides comprehensive reporting 
and improved change-manage- 
ment facilities for CICS, help- 
ing to further reduce mainte- 
nance cost, the company said. 

A further benefit of the zEn- 
terprise system design is 
reduced latency through closer 
and faster network connections, 
and through Unified Resource 
Manager, Bozman said. 

"You can think of the main- 
frame as a superhighway that will 
allow you to go at speeds that 
nothing else can match, but it 
had a dirt onramp," Searle said. 
"Now it has an equal opportuni- 
ty for consideration for the 
development of services in the 
future." I 
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More room for data in Terracotta caching update 



BY DAVID WORTHINGTON 

Terracotta has taken its 
Ehcache Java caching compo- 
nent to scale with a new version 
that can store more than a ter- 
abyte of data in memory. 

Ehcache 2.2, released in 
July provides over a terabyte of 
storage out of the box with sup- 
port for hundreds of millions of 
entries, said Amit Pandey CEO 
of Terracotta. Java developers 
can invoke the caching with two 
lines of configuration in 
Ehcache, he said. 



Terracotta acquired the 
Ehcache open-source project in 
August 2009. Ehcache, avail- 
able in both open-source and 
commercial versions, can be 
bundled with Java products, 
including Hibernate ORM and 
the Spring Framework. 

The company estimates that 
over 250,000 copies of applica- 
tions are using Ehcache. At 
least 1,000 have already gone 
into a distributed mode of 
deployment, Pandey said. 
Ehcache takes the "elbow 



grease" out of deploying a high- 
scale system, he said. Develop- 
ers using competing distributed 
caching solutions find it diffi- 
cult to move beyond two appli- 
cations because they are too 
hard to use and require custom 
coding, he claimed. 

Ehcache 2.2's commercial 
pricing ranges from US$1,000 
per node to $4,000 per applica- 
tion node. The commercial edi- 
tion includes more operations 
and management-oriented fea- 
tures than the open-source 



product, Pandey noted. 

Other new features found 
only in the commercial edition 
include deeper visibility and 
control in the Ehcache manage- 
ment console, with the addition 
of the Quartz Scheduler and 
Web Sessions open-source job 
scheduling services. The con- 
sole also provides a single view 
of cluster-wide events to help 
operators identify problem 
nodes and diagnose perfor- 
mance problems. 

The company also focused 



on enabling scenarios where 
customers use multiple data 
centers by enabling cache repli- 
cation among clusters in dis- 
parate geographic areas. 

A common runtime library is 
meant to reduce memory usage 
and network connections. It 
also exposes an API that pro- 
grammers can use alongside the 
Ehcache API to perform com- 
plex inter-process coordination 
tasks across multiple machines 
with just a few lines of code, 
according to the company. I 



SMARTBEARS TESTCOMPLETE 8.0 TARGETS BEGINNERS 



BY KATIE SERIGNESE 

With a new Test Visualizer and 
keyword-driven testing aimed 
at novice testers, along with a 
new JavaBridge for more expe- 
rienced testers, automated test- 
ing solution TestComplete 8.0 
introduces several new features 
for all levels of testing expertise. 
Released in July by Smart- 
Bear Software, TestComplete is 
introduced as the first product 
under the SmartBear name 



after the three-way merger of 
testing tools company Automat- 
ed QA, ALM software provider 
Pragmatic Software, and Smart- 
Bear Software, makers of peer 
code review software. 

TestComplete s Test Visualiz- 
er lets users drag and drop icons 
onto a template, which are auto- 
matically strung together to cre- 
ate tests, explained Derek Lan- 
gone, SmartBears president. 

The feature can also extend 



tests directly from screenshots 
during test recording and play- 
back, an ability directed at more 
experienced users, said Sergei 
Sokolov, SmartBears director of 
product management. 

A new keyword-driven test 
feature also allows novice users 
to build tests using natural lan- 
guage, which are then convert- 
ed by TestComplete into 
sophisticated scripted tests, 
Langone said. 



"[TestComplete] is for cus- 
tomers not particularly skilled 
at scripting, but also not at the 
expense of our power-user cus- 
tomers," he added. Additional- 
ly, an automated Data-Driven 
Loop wizard imports data from 
Excel or other data sources and 
creates data-driven tests with- 
out any scripting. 

For more experienced users, 
TestComplete introduces 

JavaBridge. By directly interfac- 



ing with APIs of Java objects that 
live inside applications, testers 
get another level of visibility and 
control into the behavior of test- 
ed applications, Sokolov said. 

Users can now also perform 
automated testing on native 
and managed Microsoft Visual 
Studio 2010 and .NET Frame- 
work 4 applications, and it 
includes support for Fire fox 3.6 
and Silverlight 4 Web technolo- 
gies as well. 

TestComplete 8.0 is avail- 
able now with a free 30-day 
trial. I 
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, NEW PRODUCTS , 



Agile ALM company Rally Software is offering Rally for the iPhone, an 

app that the company acquired from Blue Hole Software. Previously a 
US$15 application called ScrumAway, the iPhone app offers access to 
the real-time status, progress and quality of agile development pro- 
jects ... A new open-source project, DB Relay, aims to do away with 
database access drivers and middleware. DB Relay uses JSON over 
HTTP to interact with different back-end databases. User requests are 
delivered in a unified format and are relayed using a native database 
protocol. Because DB Relay is based on the nginx Web server, it can be 
used to develop Web applications where all logic is contained in client 
JavaScript code. The current version of DB Relay is licensed under 
GPLv3, and works with SQL Server (2005 and later) and Vertica. It 
also provides beta-quality access to MySQL, PostgreSQL and databas- 
es with an ODBC interface. 



, UPDATES , 



The latest edition of Syncfusion's component suite focuses on 
adding new capabilities for ASP.NET 4 MVC and Silverlight applica- 
tions. Essential Studio 2010 Volume 3 has major updates to the 
suite's docking, Office-like Ul, Outlook-like scheduling, editors, grid, 
chart, diagram and other components. The Essential Grid for WPF 
component now supports PLINQ and can automatically optimize 
load time. Plus, the ASP.NET MVC controls now include an updated 
data grid, Outlook-like scheduling, CAPTCHA, tag cloud and rating 
controls . . . Version 10 of JReport, a Java reporting system from 
Jinfonet Software, adds rich visualization and interactive reporting 
to the business-intelligence platform, providing embedded opera- 
tional reporting to developers, and Web 2.0-style self-service report- 
ing to end users. The company's JReport Server Live uses AJAX 
technology to make rich Internet applications more interactive and 
responsive, because with report layout offloaded to the browser, 
report interaction and on-screen refresh are faster . . . PGI Visual 
Fortran for Visual Studio 2010, from The Portland Group, inte- 
grates the company's parallel Fortran compilers and tools with 
Microsoft's Visual Studio. PGI Visual Fortran is based on OpenMP 
and uses an auto-parallelizing compiler for the Fortran 95/2003 pro- 
gramming languages, and has an integrated debugger for debugging 
of single-thread, multi-thread and OpenMP parallel applications run- 
ning locally or on clusters. It also supports GPU accelerators with a 
high-level implicit model similar to OpenMP. Using compiler direc- 
tives, programmers can offload compute-intensive code regions 
from a host CPU to a GPU accelerator . . . Gizmox says that its devel- 
opment system, Visual WebGui 6.4, is the first to bring its vision of 
solving data-intensive AJAX Web development and deployment to 
completion. Visual WebGui applications are built with a form-based 
Visual Basic 6-like development experience that uses declarative 
XAML to create websites . . . GrapeCity has added charting and data 
visualization capabilities to its embeddable .NET spreadsheet. 
Spread for ASP.NET 5 not only supports Visual Studio 2010 and 
Windows Azure AppFabric, but it also has an integrated chart com- 
ponent with over 85 different chart types, as well as quick-start wiz- 
ards and a chart designer to help developers build user interfaces. It 
also retains macros, VBA and VSTO code when exporting and 
importing Excel documents, and it caches documents to speed up 
the handling of large spreadsheets . . . Rommana 10.2-the latest 
version of a software life-cycle management system from Rommana 
Software-is said to offer 45 new features over version 10.1, support- 
ing agile development, exploratory testing, and other incremental 
and highly iterative development and testing approaches. New for 
this version: Teams of up to 20 concurrent users may use the plat- 
form for up to six months at no charge . . . Object Avatars are the 
highlight of Testing Anywhere 6.5, a test automation package from 
Automation Anywhere. An Object Avatar is an object-based testing 
tool designed to reduce development and modification time. It cap- 
tures each object and application screen in a test case in the form of 
an Object Avatar, accesses these Object Avatars to create and mod- 
ify tests without access to the live application, and reduces develop- 
ment and modification times with constant access to live objects. I 



Mixing Flex, Flash 
testing into the Sauce 

Component allows app testing on single page 



BY DAVID RUBINSTEIN 

To ease automation of cross- 
browser Web application 
testing, startup company 
Sauce Labs introduced in 
July Sauce for Flex and 
Flash. Now, the company 
said, testing of Flash, HTML 
and JavaScript applications 
can be done in one browser 
page. 

Built on top of the open- 
source Flex Pilot library for 
automating Adobe Flex and 
Flash testing, Sauce for Flex 
and Flash can natively fire 
events into those types of 
Web applications for analy- 
sis, according to Adam 
Christian, JavaScript architect 
at Sauce Labs. 

"There's an enormous com- 
munity of people with interest- 
ing applications but need a 
team of people clicking through 
stuff to see if it works," he said. 
Sauce for Flex and Flash "adds 
an interface to the Flex applica- 
tion, that like a leech connects 
to the nervous system of the 
application, recording interac- 
tions with the Web page." 

A hook is embedded in the 
application that opens an API 
and, Christian said, "users can 
say, 'Do this and tell me what 
happens.'" The hook also 



Your Infrastructure 

Machine Under Test (typically a CI box) 




Sauce OnDemand 



enables users to tell the testing 
component if it is to turn on or 
not. 

"You can have it in every 
stage of development and test 
but disengage it at deploy- 
ment," he explained. The hook 
"is incredibly small. We certain- 
ly understand that every one 
[thousand lines of code] is 
important when deploying an 
app to Web" in terms of its 
impact on performance. 

In a statement, Adobe group 
product marketing manager 
Dave Gruber said, "We're please 
to see that Sauce Labs is releas- 
ing a solid open-source testing 



solution available for applica- 
tions created with Flex and 
Flash technology. The ease of 
conducting cross-browser 
application testing in the 
cloud is a great advancement, 
making Flex and Flash devel- 
opers more efficient." 

The Sauce solution is a 
commercialized version of 
the Selenium functional 
testing framework, and the 
company was founded by 
Selenium's creator, Jason 
Huggins. Meanwhile, Chris- 
tian was the co-creator of the 
Windmill testing framework. 
All the Sauce code is in 
GitHub for open-source use, 
Christian said. 

Sauce OnDemand is a cloud 
service that enables testing to 
occur on multiple browsers, 
while Sauce RC (Remote Con- 
trol) is an IDE for building and 
editing tests in a number of dif- 
ferent programming languages, 
including Java, PHP, Python and 
Ruby, Christian said. 

Based in San Francisco, the 
company was funded in January 
by Contrarian Group, the 
investment management firm 
run by former Major League 
Baseball commissioner and 
U.S. Olympic Committee chair- 
man Peter Ueberroth. I 



Licenses to close virtualization loophole 



BY ALEX HANDY 

When companies charge per 
core for their software, virtual- 
ized instances can be a loophole 
that customers can exploit to 
avoid paying licensing fees. Try- 
ing to help software publishers 
fight back, Flexera Software 
introduced in July DRM soft- 
ware to help charge per 
instance instead of per core. 

FlexNet Publisher 11.9 intro- 
duces the ability to detect when 
software is running on a 
Microsoft or VMware virtualiza- 
tion platform, allowing software 
appliances to keep track of their 
usage even when instances are 
packed into a single machine. 

Coming up with a way for 
Flexera's software to know when 
it is running in a virtualized envi- 
ronment was no small feat, said 
the company, which worked 
closely with both Microsoft and 



VMware to create such a capa- 
bility in its software. That's why 
FlexNet Publisher can only 
detect virtualization in VMware 
and Microsoft platforms, and not 
in KVM or in Xen environments. 

Steve Schmidt, vice presi- 
dent of product management at 
Flexera, said, "We worked with 
VMware and Microsoft to 
understand what APIs to be 
looking at and how to detect 
that it's running on a particular 
virtual machine, as well as to 
talk through that down to the 
virtualization layer." 

A basic package of FlexNet 
Publisher and its related soft- 
ware, FlexNet Operations, 
costs around US$10,000, with 
additional costs for additional 
licensing options. 

The underlying goal of this 
new capability is to allow com- 
panies that sell software appli- 



ances to potentially ditch the 
hardware entirely. With appli- 
ances distributed as virtual 
machine images, the final hurdle 
for many companies is proper 
license control and billing. 

And that's Flexera's primary 
reason for existing, according to 
the company: giving vendors 
remote control over their 
licensed software. Priya Raja- 
gopalan, director of product 
management at Flexera, said 
that the new version of FlexNet 
Publisher opens up new sources 
of revenue for developers. 

"I think many people are try- 
ing to modify their existing poli- 
cies to see if they can make it fit 
in a virtualized environment," 
she said. "Producers see this as a 
revenue opportunity. It allows 
usage-based pricing and the abil- 
ity to rent capacity or capabilities 
out because of virtualization." I 
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Let us help you visualize your success 

Nevron provides the essential components for the creation of advanced digital dashboards, 
scientific and financial applications, diagrams and MMI interfaces for a variety 

of .NET centric technologies. 




Nevron components integrate seamlessly in web and desktop applications, SQL Server Reporting Services 
2005/2008 reports and SharePoint 2007/2010 portals and deliver an unmatched set of enterprise-grade 
features. That is why Nevron is the trusted vendor by many Fortune 500 companies for their most demanding 
data visualization needs. 



Developers 



IT Professionals 



Nevron .NET Vision incorporates components that help you 
create enterprise grade digital dashboards, scorecards, 
diagrams, maps, MMI interfaces and much more. 
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Nevron Reporting Services Vision instantly enhances 
your SQL Server Reporting Services 2005/2008 reports 
with the industry leading data visualization technology. 
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Chart for SSRS 
Gauge for SSRS 



Nevron SharePoint Vision instantly converts your SharePoint 
pages into advanced dashboards and reports, that unite pow- 
erful data analysis with industry leading data visualization. 

Chart for SharePoint 



Q Gauge for SharePoint 



MAKE SURE THAT YOUR DATA IS MAKING THE VISUAL STATEMENT 

IT DESERVES BY DOWNLOADING YOUR FREE EVALUATION COPY 

FROM WWW.NEVRON.COM TODAY. 
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www.nevron.com | sales@nevron.com | 1888 201 6088 



Microsoft, .NET, ASP.NET, SharePoint, SQL Server and Visual Studio are registered trademarks of Microsoft Corporation in the United States and/or other countries. 
Some Nevron components only available for certain platforms. For details visit www.nevron.com or send an email to support@nevron.com. 
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Looking out for similarities 

Protecode's algorithms identify open-source content in code 



GpfQtecatie 



BY KATIE SERIGNESE 

With new manage- 
ment capabilities 
and the ability to 
recognize similari- 
ties in code, Prote- 
code System 4 was 
released in July. The 
server-based solu- 
tion for open-source 
license management 
aids organizations in 
identifying open- 
source content in 
source code, as well 
as determining licensing obliga- 
tions for that code. 

Installed as an overlay on 
existing design, development 
and testing environments, Sys- 
tem 4 enables multiple users to 
access and connect to the enter- 
prise server from anywhere. 
"This is especially helpful for 
distributed teams to share infor- 
mation and results, and to com- 
municate and exchange with 
each other through the work- 
flow," said Protecode CEO 
Mahshad Koohgoli. 

Since multiple users can 
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Intellectual property reports advises developers about licensing obligations. 



access the server, new capabili- 
ties enable management to 
define roles, policies and courses 
of action if violations are detect- 
ed during analysis, he said. "For 
example, management can 
determine who can view what 
from reports or who can accept, 
reject or comment on analysis." 

Source code is run against 
the Protecode reference data- 
base of 450,000 open-source 
software projects. However, 
"one downside to having a large 
database is a lot of noise is cre- 
ated and several similarities 



code, 



can be found 
Koohgoli said. 

To reduce the amount of 
false positives, Protecode added 
"intelligent" algorithms to sift 
through the similarities of code 
structure. "This improves the 
relevance of data to the users 
and eliminates having to do any- 
thing manually," he added. 

The browser-based user 
interface was revamped for ease 
of use and efficiency, the compa- 
ny said. System 4 is available 
now with pricing based on the 
volume of software analyzed. I 



SDK supports PerlNET 



BY ALEX HANDY 

Active State has updated its Perl 
Dev Kit (PDK) to version 9. 
Released in July, it adds support 
for Perl 5.12, the most recent 
update to the language. 

PDK 9 also supports HP- 
UX and 64-bit PerlNET 
(ActiveState's Perl component 
builder for the .NET Frame- 
work) for the first time. 

Jeff Hobbs, director of engi- 
neering at ActiveState, said 
these new additions to PDK 
spread the appeal of Perl across 
all platforms. "In the latest 
PDK, we have updated the 
tools for full support of the new 
Perl 5.12 release," he said. 

Hobbs referred to a late 2008 
Gartner titled "Dynamic Pro- 
gramming Languages Will Be 
Critical to the Success of Many 
Next-Generation AD Efforts." 
In the report, Mark Driver 
writes, "Consider dynamic pro- 
gramming languages for projects 
where .NET and Java are overly 
complex for project design goals; 
however, do not assume that 
dynamic programming will 
replace investments in estab- 
lished software platforms, such 



as .NET or Java, in the near 
future." That means languages 
like Perl and PHP need to work 
in Java and .NET environments. 

PerlNET integration means 
that .NET developers can now 
implement .NET classes in Perl 
or have .NET code call out to 
Perl code. PDK 9 also includes 
tools for helping to improve the 
coding skills of new Perl users. 

"It provides the extra tools to 
elevate a Perl programmer's 
dev skills, whether newbie or 
advanced programmer," said 
Hobbs. "For development, it 
includes Perl Critic to recom- 
mend best practice coding and 
static analysis of code, and Cov- 
erage Analyzer that handles 
both code coverage and profil- 
ing of Perl code." 

For deployment, PDK 9 eas- 
es the transition of an application 
to the live servers, said Hobbs. 
"It also solves deployment issues 
with PerlApp, wrapping Perl 
applications into single-file exe- 
cutables that don't have depen- 
dencies. In addition, there are 
several tools for deep Windows 
integration, from ActiveX to ser- 
vices to .NET," he said. I 
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Urbancode's AnthillPro offers a complete 
enterprise continuous integration platform 
to help you get your builds and deployments under control. Urbancode 
was named to the 2010 SD Times 100 list of the top leaders and inno- 
vators in software development industry. 

"AnthillPro helps organizations establish a common process for 
release management — a common set of steps to go horn develop- 
ment to release," says Maciej Zawadzki, Urbancode's cofounder and 
CEO. "This issue is especially important for shops that use off-shoring 
or outsourcing. Standard processes help them maintain control across 
the different projects and the different parties involved." 

AnthillPro (www.anthillpro.com) automates the steps from the 
time code is committed until the change is deployed to production. 
It ties together coding, QA, release management and operations, and 
provides traceability across the life cycle. An automation platform 
that can be used across teams regardless of development technolo- 
gies, AnthillPro's server-agent architecture scales up to support enter- 
prises with thousands of developers, thousands of projects and thou- 
sands of builds a day. 

The tool helps you keep pace with agile practices by saving time 
from start to finish. Build automation and continuous integration 
rfftSta provides rapid feedback, so you can 
fix problems when they are 
cheaper and easier to fix. 




Push-button, on-demand deploy- 
ment automation lets you test changes 
on your own schedule without waiting 
for someone else to do the deploy- 
ment. Using a consistent automat- 
ed deployment across different envi- 
ronments both speeds deployments and reduces deployment failures, 
so your teams are less likely to spend nights and weekends trying 
to recover from failed deployments to production. 

Integrated artifact management guarantees that the binaries you 
are deploying to production are bit-for-bit the same as the binaries 
that you've deployed and tested throughout the life cycle in your low- 
er environments. AnthillPro's built-in dependency management 
improves component reuse by allowing you to do impact analysis 
before making a change. More than 60 out-of-the box integrations 
are provided for a wide range of ALM tools so that you can be up and 
running quickly. 

"Urbancode was one of the pioneers of build automation and con- 
tinuous integration going back to the original open-source version of 
Anthill in 2001," Zawadzki says. "AnthillPro today is the result of 
years of experience with literally hundreds of customers, and con- 
tinues to provide market-leading innovations in build and deploy- 



ment automation." 
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NVIDIA releases GPU dev tools for Visual Studio 

Integrates build, debug and profiling for parallel programming on Microsoft platform 



BY DAVID WORTHINGTON 

Within the past several years, the GPU 
went from being supercharged graphics 
hardware to a medium for parallel pro- 
gramming. Now, NVIDIA is attempting 
to take GPU development to the masses 
with a new tool set for Microsoft Visual 
Studio. 

NVIDIA released in July a free edi- 
tion of Parallel Nsight, a GPU-accelerat- 
ed application development tool set that 
integrates with Visual Studio 2008 SP1 
Professional edition. It can be deployed 
on Windows HPC Server 2008, Win- 
dows 7 and Windows Vista. 

Nsight can be used to develop Com- 
pute Unified Device Architecture 
(CUDA) C/C++ applications, or applica- 
tions that use Microsoft's DirectCompute 
DirectX API. CUDA was created by 
NVIDIA to make its hardware accessible 
to developers. NVIDIA developed 
CUDA C/C++ as an extension to C/C++ 
for parallel programming. The CUDA 
C/C++ language is being taught at more 
than 350 universities, the company claims. 

The Parallel Nsight tool set allows 
applications to execute across both 
CPUs and GPUs, but the GPUs must 
support NVIDIAs CUDA architecture. 



CUDA - NVIDIA's Architecture for GPU Computing 



GPU Computing Applications 
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•Running in production 
since 2008 

•SDK+Libs+Visual 
Profiler and Debugger 
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Compute 



•Microsoft API for 
GPU Computing 
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Fortran 



•PGI Accelerator 
•PGICUDA Fortran 



OpenCL 



•Commercial OpenCL 
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•SDK+Visual Profiler 



DIA GPU 

with the CUDA Parallel Computing Architecture 



Source: NVIDIA 

NVIDIA's CUDA architecture supports CUDA C/C++, Microsoft's DirectCompute API, Fortran, 
Java, OpenCL, Python, and .NET. 




Python, 
Java, .NET,, 



•PyCUDA 
•jCUDA 
•CUDA.NET 
•OpenCL.NET 



Several NVIDIA GPUs are capable of 
running CUDA applications, said San- 
ford Russell, general manager of GPU 
Computing at NVIDIA. 

GPUs have a parallel throughput 
architecture that can be exploited to 
accelerate applications in finance, graph- 
ics, cryptography and other disciplines. 

Parallel Nsight packages 10 of 
NVIDIAs development tools that were 



previously standalone, integrating build, 
debugging and profiling, said Russell. It 
plugs fully into Microsoft's debugging 
engine, a feat that took NVIDIA a year 
and a half of engineering work to accom- 
plish, he added. 

"Research shows that developers 
believe the most difficult tasks when 
developing parallel applications are 
debugging, performance tuning and 



designing parallel algorithms," said David 
Rich, director of technical computing at 
Microsoft. "By integrating GPU comput- 
ing into Visual Studio, NVIDIAs Parallel 
Nsight is transforming the way GPU- 
based parallel computing applications are 
developed for Windows." 

A Professional edition of Parallel 
Nsight is available as a release candidate. 
It adds additional functionality, includ- 
ing a CUDA C/C++ performance ana- 
lyzer, OpenCL and OpenGL analyzers, 
and DirectX 10 and 11 analyzers. 

NVIDIA also shipped CUDA Toolkit 
3.1, an update to its CUDA software 
development kit. The toolkit features 
faster data transfer rates with a new API; 
supports multiple kernels on a single 
GPU; and introduces the ability for 
developers to debug hardware directly 
instead of using emulation, Russell said. 

Future editions of Parallel Nsight will 
have interconnections with Microsoft's 
parallel development tools, he said. 
Visual Studio 2010 support will arrive 
later this year. 

"We've got feature enhancements 
lined up for two years," Russell said. 
"The first big step was integration with 
Visual Studio." I 
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S<%| 7l|l fl/V Computing in the cloud is the wave of the future. 
^^ However, many enterprise executives worry that their 

data will be insecure. In addition, it's a whole new ballgame for devel- 
opers. Gizmox's Visual WebGui addresses both of these issues. 
Gizmox was named to the 2010 SD Times 100 listing of top leaders 
and innovators in the software development industry. 

"Visual WebGui is a proven and innovative platform that trans- 
forms existing client/server apps or code into functionally equiva- 
lent Web/SaaS/cloud apps requiring less than 10% of the time and 
cost required for traditional Web solutions," says Navot Peled, the 
company's founder and CEO (www.visualwebgui.com). "The Visual 
WebGui platform can be used to transform existing apps or to build 
new ones. The result is a secure Web or cloud application that 
runs and behaves like its desktop equivalent, accessible from any 
browser, Silverlight or mobile device with no need for a download- 
able plug-in by the end user." 

Visual WebGui tools support the migration of legacy systems to 
cloud application servers. 

The products give you the ability to develop data-centric enter- 
prise AJAX-driven applications using Visual Basic-like Forms-based 
drag-and-drop tools or declarative XAML. With Visual WebGui, 
iflSHJft Y our developers create Web applica- 
tions exactly like they would 
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develop desktop or client/server 
applications. Web complexities and 
hassles are abstracted away. This means 
no HTML and no JavaScript 
spaghetti coding. 

Benchmarks for Visual WebGui 
products indicate up to 90% development time reduction from oth- 
er development methods. With this reduced development time and 
basic desktop skills, individual developers, small to medium devel- 
opment shops, and enterprises with limited resources and no AJAX 
skills can build applications that in the past were the domain of 
only large shops. Thus, the tools empower you to compete and win 
large projects and deliver on time with controlled resources and 
budgets. 

Visual WebGui products are available as a free, open-source LGPL 
licensed Express Studio edition for small, non-commercial projects, 
or as a full-featured commercial Pro Studio edition. The Pro Studio 
edition includes 24-hour support. 

"Visual WebGui products were built to solve one of the most 
painful IT challenges of the last Internet decade: the inferiority of 
Web development methods compared to desktop methods," Peled 
says. "Their capabilities and rapid adoption are proof that Visual 
WebGui is on the right track." 

Visual WebGui 
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Mastering iPhone OS 4.0: What's New, What's Changed 
Mobile Data Synchronization with Any Database 
The Science of Making a Successful Free App 
Marketing in the Social Media APPmosphere 
Connecting Apple's iPhone to Google's Cloud 
Developing Effective Enterprise Smartphone Apps 
iPhone Development for .NET Developers 
Ship Your App Now by Creating Hybrid Applications 
Making and Marketing Apps That Succeed 
Graphic Design Techniques for Developers 
From JavaScript to iPhone SDK Programming 
TANSTAAFL: Using Open-Source iPhone Ul Code 
Dynamic App Data Updates via NSURLConnection 



Case Study: Designing, Building and Scaling Trapster 

The iPhone OS Audio Landscape 

Building an iPhone Publishing House 

Mastering the External Accessory Framework 

Custom UlView Drawing with CoreGraphics 

Unit Testing That Doesn't Suck 

Push it Up: Mastering Apple's Push Notifications Service 

iPhone/iPad Networking with NSStream 

Is It Real or Is It Virtual? Augmented Reality on the iPhone 

Everything You Wanted to Know About UlTableView 

Building iPhone Applications in a Team Environment 

Succeed with iPhone/iPad Apps Marketing 

Creating an Easy-to-Use Objective-C Modular Framework 



Full Technical Program Online 
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expert speakers 

Our top-notch faculty are the most established apps developers and 
marketers in their business. They're not talking heads or corporate 
drones: They're hands-on experts with real-world apps experience. 
They know what it takes to succeed in the mobile marketplace, and at 
iPhone/iPad DevCon, they'll share their knowledge, insights and best 
practices with you to give you a great technical conference experience. 
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BlockHead: Blocks in Objective-C 
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A modern workbench for mainframes 

Compuware provides plug-ins for data, debugging and testing tools 



BY DAVID worthington tools that it fears might be- puware Workbench, which A beta version of Work- 
Over the past 30 years, Com- fuddle today's college gradu- repackages its tools with a bench was announced in July 
puware has built command- ates. Its solution was to create GUI for a new generation of Workbench is an Eclipse IDE 
line mainframe programming a new product called Com- developers. that packages plug-ins for 
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application performance man- 
agement, data and debugging 
tools, as well as regression 
testing, replay tools and source 
editing tools. The company 
anticipated shipping the final 
version of Workbench earlier 
this month, 

Compuware began the 
process of migrating its tools to 
GUI interfaces several years 
ago by rolling out point prod- 
ucts, said product manager 
Tyler Allman. "We now have 
enough components to keep 
the developer inside of the 
GUI." 

Workbench introduces new 
components that were not 
available in previous versions 
of the Compuware toolbox, 
including an OEM edition of 
the SlickEdit source-code edi- 
tor that is optimized for 
COBOL, Allman said. It also 
introduces several new file and 
data manipulation compo- 
nents. The tools are designed 
to work with IBM's Time Shar- 
ing Option mainframe envi- 
ronment and Interactive Sys- 
tem Productivity Facility 
terminal interface. 

Allman acknowledged that 
Workbench does not yet have 
feature parity with Com- 
puware's command-line tools. 
"We broke down the [com- 
mand-line] products into the 
80/20 rule, and delivered the 
most used stuff." 

"Workers who chose IT as a 
profession during the past 20 
years have completely different 
sets of skills, and use different 
languages and application 
architectures," said Gartner 
analyst Dale Vecchio. 

"Consequently, the pending 
retirement of the Baby Boomer 
generation will have a signifi- 
cant impact on continuing to 
operate many of the legacy sys- 
tems that focus on running the 
business." 

Up to 40% of that genera- 
tion of mainframe developers 
is nearing retirement, claimed 
Paul Vallely, Compuware's 
solution sales director. "Back- 
filling individuals are not used 
to the old mainframe environ- 
ment." 

However, modern GUI- 
based tools and training can 
help younger developers over- 
come this learning curve, he 
added. I 
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New Apache board oversees project advances 



Apache FOR JMeter updates hit; Subversion 1.7 planned for fall 



BY ALEX HANDY 

The Apache Foundation has 
elected a new board of directors, 
made up mostly of old directors. 
The board, announced July 15, 
oversaw the release of version 
1.0 of the Apache Formatting 
Objects Processor (FOP) and 
version 2.4 of JMeter. 

The board now consists of 
Shane Curcuru, Doug Cutting, 
Bertrand Delacretaz, Roy T 
Fielding, Jim Jagielski, Sam 
Ruby, Noirin Shirley, Greg Stein 
and Henri Yandell. Of them, 
Shirley is the only member to 
not have served previously on 
the board. She has served as the 
Foundations vice president of 
event planning and a documen- 
tation writer for various Apache 
projects. 

Getting a second term on the 
board is Doug Cutting, creator 
of the Apache Hadoop project. 
Justin Erenkrantz, president of 
the Apache Software Founda- 
tion, said that Hadoop remains 
the most active project at 
Apache, thanks to numerous 
sub-projects that were put into 
the incubator earlier this year. 

The new board will also over- 
see the transition of Subversion 
into the Apache process. "Sub- 
version is doing great," said 
Erenkrantz. "The community is 
finishing some major plumbing 
work that should deliver some 
significant client-side perfor- 
mance improvements. 

"We are focusing on starting 
the 1.7 release cycle in the fall. 
A number of companies contin- 
ue to contribute to Subversion 
(such as CollabNet and elego), 
[and] some new companies 
have stepped up their contribu- 
tions within the community, 
like WANdisco." 

July was also a busy month for 
releases at the Foundation. 
Apache FOP, which has been in 
development since 1999, is only 
now reaching version 1.0. The 
project has long been used by 
XSL applications as an output- 
independent formatter for print, 
despite not being in 1.0 form. 

"FOP 1.0 provides a good 
subset of the W3C XSL-FO 
1.0/1.1 specification [an extensi- 
ble style sheet designed to make 
XML easier to print]," said Jere- 
mias Marki, member of the 
Apache XML Graphics Project 
Management Committee. 

"Its stable, 1.0 designation 
provides added recognition as 



the productive tool it has been 
for years." 

As for CouchDB, Erenkrantz 
said that this NoSQL isn't the 
only such project at Apache to 



approach 1.0: Cassandra is also 
progressing. "We welcome com- 
petition between our projects as 
long as there is a sustainable 
community behind the projects," 



he said. 

"Ant and Maven happily 
occupy substantial portions of 
the Java build ecosystem, and 
Hive and Pig both represent 



approaches to data analytics 
under Hadoop." 

Finally, on July 14, the Foun- 
dation released version 2.4 of 
JMeter. The project can be used 
to generate test loads, measure 
performance and test functional 
behavior. Version 2.4 adds the 
ability to sample HTTPs traffic 
and JUnit annotations. I 
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Software architecture brought into the open 

SonarJ 6.0 platform imports an application's structure from development tools for analysis 



BY ALEX HANDY 

Application architecture is sig- 
nificantly different from build- 
ing architecture. For the person 



designing the building, the 
underlying structure can be 
seen every day as the project 
progresses. But for application 



builders, that architecture 
becomes more obfuscated with 
new code every day. 

SonarJ 6.0, released in July 



by hello2morrow, aims to solve 
this problem by bringing the 
underlying architecture of Java 
applications out into the open. 




For development managers 
looking for a daily starting 
point, SonarJ 6.0 includes a 
new dashboard that aggregates 
metrics from its static analysis 
of code and shows potential 
trouble spots. 

There's also a new metric for 
measuring architectural com- 
plexity. Called the "structural 
debt index," this metric mea- 
sures the amount of effort 
needed to remove structural 
debt from a project. 

Alexander von Zitzewitz, 
CEO of hello2morrow, said that 
structural debt is an estimate of 
the effort needed to clean a 
project from structural erosion. 

"Structural erosion is caused 
by unwanted dependencies vio- 
lating architecture rules and 
cyclic dependencies between 
packages," he said. "I observed 
that, by just looking at cyclic 
package dependencies, you can 
get a pretty good estimation of 
the degree of structural ero- 
sion. The structural debt is cal- 
culated by calculating how 
many places in the code would 
need to be changed to break up 
all cyclic dependencies." 

Combined with new traffic 
light icons that signal just how 
badly convoluted an area of 
code has become, development 
managers can see their Java 
applications as they evolve and 
increase in complexity. 

Further, a new sandbox 
mode gives the tool the ability 
to provide a look at how a refac- 
toring would affect the code, 
revealing architectural prob- 
lems that would result from 
such a refactoring without actu- 
ally touching the code itself. 

von Zitzewitz said that ver- 
sion 6.0 makes it easier for new- 
comers to start using the tool, 
thanks to handlers that can 
import an applications struc- 
tural information from popular 
development tools. 

"Creating a new system is 
now easier than ever," he said. 
"A wizard guides you through 
all the needed steps, and you 
can directly import software 
systems not only from Eclipse, 
but also from Maven." 

For existing SonarJ users, 
version 6.0 is a free upgrade, 
provided those licenses are 
already up to date. It is avail- 
able for Linux, Mac OS X and 
Windows. I 
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Cloud-based test service uses real data 

Mu Dynamics' Studio Scale captures, replicates traffic for more realistic tests 



BY ALEX HANDY 

Why test with randomly gener- 
ated packets when you can cap- 
ture real data and use that 
instead? Mu Dynamics is hop- 
ing this proposition can propel 
its newest test suite to the fore- 
front of cloud-based services 
testing. 

In July, the company 
released Studio Scale, a testing 
suite that can capture traffic 
across multiple protocols, then 
regurgitate said traffic during 
test barrages. 

Dave Kresse, CEO of Mu 
Dynamics, said that many 
existing scale-testing frame- 
works aren't based on real traf- 
fic. The ones that are, he 
added, are typically focused on 
HTTP only. Studio Scale is 
designed to capture and repli- 
cate traffic of all kinds, from 
VOIP to video to chat and oth- 
er protocols. This allows his 
company to focus on complex 
environments, and to give test 
developers a more flexible tool 
for putting Web services to the 
grindstone. 



"We take service transac- 
tions and transform those 
into parameterized interac- 
tions," Kresse said. "We 
take real traffic and, for the 
purpose of test, replicate 
those services and those 
components. This is true 
replication such that the 
application can't tell if 
they're in a real world or if 
they're virtual." 

This approach is based 
on the more traditional 
methods of testing enter- 
prise applications, he said. 
Specifically, desktop test- 
ing tools from now- 
acquired companies like 
Mercury and Rational were 
based on the idea of 
recording desktop activity 
and replicating it during 
tests. Most often, this was 
done in the form of captur- 
ing keystrokes and mouse 
clicks. 

Kresse said Mu Dynamics 
implemented this philosophy 
in the creation of Studio Scale. 
Instead of monitoring mouse 
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Testers can generate real transactions and monitor performance under this load. 



clicks, Studio Scale captures 
packets as they move from the 
server to the client and back 
again. Thus, a website based 
on sharing video content could 



be tested with the traffic gen- 
erated from uploading that 
video and watching it in the 
browser. 

Studio Scale costs between 



US$100,000 and $125,000. 
The software is part of the 
company's larger suite of 
fuzzing and verification 
products, said Kresse. 

He added that the thing 
that differentiates Studio 
Scale from other testing 
suites is its ability to repli- 
cate full transactions at 
scale rather than simply 
replicating simple commu- 
nications concurrently. 
"The key is there's really no 
ability to simulate or repli- 
cate the concurrent trans- 
actions anywhere else," he 
said. 

"When you're doing 
some of these complex 
transactions, the stress 
happens in unexpected 
ways. It's not a question of 
throughput; it's a question 
of where the service stalls 
itself. It happens at much 
lower concurrency levels than 
you might expect. When you 
start to do the actual transac- 
tions, things come down at 
much earlier levels." I 
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Symbian collaboration goes cross-platform 



BY KATIE SERIGNESE 

The non-profit Symbian Foun- 
dation has joined with Nitobi, 
creator of PhoneGap, in an 
open-source collaboration for 
cross-platform mobile applica- 



tion development. 

Announced in July, Sym- 
bian's tools are now integrated 
with Nitobi s "write once, run 
anywhere" mobile application 
development framework. This 



will enable developers to build 
mobile applications with CSS, 
HTML and JavaScript for major 
mobile platforms such as 
Android, BlackBerry, iPhone, 
Palm and Symbian. 



"The sweet spot for this 
combination is for those who 
have done a lot of Web devel- 
opment, and are probably not 
comfortable with C++ and writ- 
ing native applications, but 
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want to do a little more than 
write a Web page," said Paul 
Beusterien, head of Symbians 
Development Tools group. 

Developers "are now able to 
access phone contacts and oth- 
er device capabilities in addi- 
tion to the Web programming 
knowledge they already have," 
he added. 

"PhoneGap brings the abili- 
ty to get a set of APIs for device 
capabilities that [developers] 
can write to in a standard way 
for multiple mobile platforms," 
Beusterien said. 

Native device capabilities 
include accelerometers, cam- 
eras, GPS and more. In addi- 
tion, Nitobi contributed Phone- 
Gap to Symbian, which is now 
included in the Symbian 3 plat- 
form Web extensions package. I 

NEW SERVICE 
HELPS ISVs 
MONITOR USAGE 

BY KATIE SERIGNESE 

CodeArmor Software Intelli- 
gence Online, a new service 
from software protection compa- 
ny Vi Labs, brings tracking, 
reporting and piracy detection in 
a browser-based solution. 

Based on the on-premise 
solution CodeArmor, the Soft- 
ware-as-a-Service includes Trial 
Download Tracking, Software 
Usage Reporting, and Piracy and 
Detection Reporting modules 
for small to mid-sized ISVs. 

Using Software Intelligence 
Online's APIs, the Trial Down- 
load Tracking and Software 
Usage Reporting modules give 
visibility into actual software 
usage during trial periods. They 
also help identify product fea- 
ture usage, which software envi- 
ronment the software is used in, 
geographic locations, and other 
data. The data produced by 
these reports can also be used in 
marketing initiatives, said Victor 
DeMarines, vice president of 
product marketing. 

Additionally, to ensure the 
integrity of intellectual property, 
the Piracy Detection and 
Reporting service is triggered 
once tampering of code is 
detected. Afterwards, De- 
Marines said, the information 
gathered is stored on a secure 
server and can be accessed by a 
secure dashboard. 

Software Intelligence Online 
is available starting at US$3,000 
per year to track up to three 
applications. I 
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Rackspace cloud based on Linux model 



BY DAVID W0RTHINGT0N 

Rackspace is collaborating with 
NASA to build an open-source 
cloud infrastructure that it said 
will help developers avoid 
provider lock-in with a Linux 
type model. 

Rackspace announced in July 
the launch of the OpenStack 
cloud platform. The platform 
consists of a distributed object 
store based on Rackspace Cloud 
Files, and a forthcoming com- 
pute provisioning engine that is 
a hybrid of Rackspace and 
NASA's Nebula technology. 
Nebula is an open-source cloud- 
computing project that provides 
an alternative to building data 
centers, according to NASA. 

Application portability is one 
of the primary goals of the Open- 
Stack project, said Jonathan 
Bryce, founder of Rackspace 
Cloud. Portability will help drive 
faster adoption of cloud comput- 
ing, he explained. 

"One of Rackspaces inten- 
tions is to drive standards or, at 
least, interoperability in the 
cloud space, so I suspect this 
project will add some gas to that 
fire," said RedMonk analyst 
Michael Cote. 

"Standards in the cloud space 
are always up and down: People 
who are leaders say it's too early 
to worry about standards; new 
entrants and leader-hopefuls 
tend to emphasize it more, while 
several surveys of users show 
that security is a wider concern 
than interop and standards. 

"Long term, they matter 
tremendously, but there's such 
froth in the cloud space nowa- 
days that it's sort of all at once on 
that account," Cote added. 

An open cloud ecosystem will 
be positioned to drive standards 
for interoperability and security, 
said Chris Kemp, NASA's CTO 
for IT. It will give the govern- 
ment a chance to write code to 
address some of those concerns 
immediately, he added. 

Standards can be reached 
through market saturation 
instead of a formal multi-year 
effort from standards bodies, 
Bryce said. "We're not patient 
enough to wait for standards 
bodies to come up with full rec- 
ommendations. We're involved 
in those efforts, but customers 
come to us with requirements 
daily," he said. 

The Object Management 
Group is spearheading a multi- 
party effort to establish a uni- 
form vocabulary for cloud com- 



puting, as well as to synchronize 
standards development. 

Rackspace intends to create a 
Linux type ecosystem, Bryce 
explained. He compared the 
project to POSIX (Portable 
Operating System Interface for 



Unix), a Unix API with a shell 
interface and utilities. POSIX 
became a standard and helped 
Linux grow. 

Rackspaces ulterior motive 
could be to compete against 
market leader Amazon on 



openness and standards, Cote 
said. OpenStack would also give 
Rackspace a hedge against the 
private cloud trend, he added. 

"If OpenStack can get into 
private cloud projects, Rack- 
space extends its sales pipeline 



into those enterprise accounts, 
whereas folks like VMware, 
Microsoft, IBM, Eucalyptus, 
Ubuntu, Red Hat and Cloud 
.com would have crushed Rack- 
space's foot in the door," Cote 
said. I 
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Black Hat exposes security issues 



< continued from page 1 

that includes security require- 
ments for developers. 

"This would be a good thing, 
as would requiring certifica- 
tions to test code. What's 
important here is that the job 
market start to see value in such 
certifications," Black said. 

The rest of the discussion had 
no single point of emphasis, but 
there was a lot of focus on secure 
Web (rather than client) applica- 
tion development, he said. 

On Web application security, 
attendees asked panelists how 
they will fix cross-site scripting, 
saying that it is a design flaw and 
that there is no way to fix it with- 
out "breaking the Web." Anoth- 
er attendee suggested that 
developers bar older, "insecure" 
browsers from their websites. 

Other ideas included intro- 
ducing a new model for Web 
pages that would be more 



secure and transitioned in over 
a 10-year period; barring 
browsers from carrying log-in 
information from tab to tab; 
and whether more of a reliance 
on mobile client-side applica- 
tions would improve things. 

More general suggestions 
were security for "plug and 
play;" improving upon API 
design; encouraging the wide- 
spread adoption of software 
assurance processes; taking 
steps to eliminate injection 
attack vulnerabilities from 
applications; and establishing 
borders between the applica- 
tion and operating system. 

Software should come digi- 
tally signed, telling you what it 
will do and access, an attendee 
suggested. Another believed 
that applications should include 
behavior profiles with informa- 
tion for the user and the oper- 
ating system. 



'Software and systems 
vendors [should] have 
the same kind of legal 
liability that vendors 
of other products... 
have for the quality 
and safety of their 
products.' 



—Rex Black, Rex Black Consulting 




The SAFECode panelists 
were also told to effectively 
change consumer behavior by 
telling customers about the ben- 
efits of the security features in 
their products and what could 
happen when they make risky 
decisions. Panelists raised the 
question of whether software 
makers were better off telling 
the user the consequences of 



what they are doing, or whether 
they want customers to trust the 
company to make the decisions. 

"As I mentioned above, I 
think the better way to handle 
this is to make software and sys- 
tem vendors responsible for the 
quality and security of their sys- 
tems," Black said. 

Some attention was paid on 
how to "kill" the economics of 



vulnerability exploitation, 

which can be a very lucrative 
criminal act. A more radical 
suggestion from an attendee 
was for the security community 
to work together with society to 
"make our data worthless" by 
"getting rid of social security 
numbers and credit card num- 
bers entirely. 

SAFECode will filter the 
suggestions to its technical 
committees to work on security 
white papers and to establish 
best practices, Lipner said. The 
papers are made public, and 
developers can apply the ideas 
should they choose, he added. 
"We're not asking them to tell 
us, but what I do know what is 
happening is sharing of best 
practices among SAFECode 
members." 

"All of us have learned about 
techniques, tools and training 
processes from each other." I 



Breaking down barriers that 
women face in open source 



< continued from page 1 

observed that even when young 
girls have access to technology 
in the classroom, that "public 
computers means running pro- 
prietary software," according to 
the report. It suggests inserting 
open-source software into com- 
puter science classes. 

The National Science Foun- 
dation has found that many 
women are turned off of com- 
puter science in grade school 
before they understand com- 
puting due to the perception 
that it is an isolating profession. 

The Women's Caucus has 
recommended that steps be 
taken to highlight women who 
are already participating by 
using them to recruit other 
women within projects and as 
mentors to other women. Pro- 
ject leaders emphasize partici- 
pation over competition, using 
diversity statements to commu- 
nicate what kinds of behavior 
are acceptable, and establish 
paid internships for women, 
the report says. 

"I like the focus on mentor- 
ship... I found myself uncom- 
fortable in an all-male comput- 
er science center [while 
attending college]," said Karen 
Sandler, general counsel of the 
Software Freedom Law Center 



WHAT STANDS IN THE WAY 



• The perception that the FOSS movement is a "boys' club" 

• A shortage of female role models in the community 

• The feeling that women are being judged at a higher 
standard than men 

• Feelings of isolation 

• Sexist behavior 

• Non-coding roles that are often occupied by women 
being undervalued. 

Source: FSF Women's Caucus 



(SFLC). The SFLC provides 
legal services to open-source 
projects and organizations. 
"There were no female employ- 
ees or users at workstations. It 
was not a welcoming place for 
women to be." 

Sandler was hired to work at 
the center as a student worker 
after expressing her concerns to 
its administrators. Having a 
woman around all the time 
encouraged greater participation 
from women, she said. "Women 
would try to come in at the time 
I was at the center... I found 
myself mentoring other women 
[in computing] at the beginnings 
of their college careers. We need 
to do more of that." 

A public wiki is being main- 
tained by FSF to provide 



resources for projects that wish 
to attract more women to their 
ranks. A new mailing list will 
announce free software speak- 
ing opportunities to women, 
and it has created a pilot pro- 
gram to increase women's 
attendance at free software 
events with a travel fund specif- 
ically for women. 

Further suggestions include 
encouraging all-women mailing 
lists within projects and making 
space for all-women networking 
events. It is also seeking to cre- 
ate programs to bring free soft- 
ware specifically to girls. The 
Women's Caucus will be sup- 
ported by an internship in the 
development of targets and oth- 
er measures of success, said FSF 
spokesperson Peter Brown. I 



Optimizations for JRuby 
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but it's only just now at the 
phase where they've solidified 
the things they need to support 
it. Even if it was only moderate- 
ly faster, it's a great thing for 
other languages on the JVM." 

That will allow for cleaner 
dependency injections and 
more flexibility for the platform 
to allow developers to do exact- 
ly what they want with their 
Ruby code, he added. 

"We can already do all the 
things 'invoke dynamic' allows 
in our codebase today, but it 
means we have to generate lots 
of Java classes to accomplish 
the same thing," said Enebo. 
"We end up loading lots of 
classes, which slows down load 
time and eats up method inlin- 
ing budgets. Invoke dynamic is 
not supposed to be a part of the 
inline budget, so in theory, 
things could end up being dra- 
matically faster. So far, however, 
they've just been a little faster." 

Preparing to use the Open- 
JDK is just one part of a larger 
optimization plan that begins in 
version 1.6. Enebo said the team 
has recently begun working on a 
new internal representation of 
JRuby, a lengthy process that 
will allow for significant perfor- 
mance improvement and opti- 
mization down the line. 

"Up to this point, we've 
generated a big abstract syntax 



tree that our JIT [just in time] 
compiler walks," he said. "It's 
difficult to do some of the lev- 
els of optimization we want to 
do. We've now got someone 
who got their Ph.D. on writing 
and optimizing a Java compiler 
optimizing our Ruby compiler. 
This will allow crazy stuff, like 
method inlining, block inlin- 
ing, dead variable elimination 
and loop unrolling. But for 1.6, 
we hope to basically have a 
simple experimental inter- 
preter in place." 

The JRuby team hopes to 
have version 1.6 ready for final 
release by the Sept. 19 start date 
of Oracle Develop, the combi- 
nation of the two conferences 
formerly known as JavaOne and 
Oracle OpenWorld. Enebo jok- 
ingly called this "Conference- 
Driven Development." The first 
release candidate for version 1.6 
should be available in late 
August. 

Meanwhile, the JRuby team 
is busy putting the final touches 
on a new book to be published 
by the Pragmatic Programmers. 
Co-written by Ola Bini, Ian 
Dees, Thomas Enebo, Charles 
O Nutter and Nick Sieger, 
"Using JRuby: Bringing Ruby 
to Java" should be available this 
winter. 

The second annual JRuby- 
Conf will be held in Columbus, 
Ohio, on Oct. 1-3. I 
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crum is popular as a jumping- 
off point for agile software 
development because, experts 
agree, it's lightweight and easy 
to grasp. Because it's a frame- 
work and not a methodology, 
it's more empirical in nature than pre- 
scriptive, and it looks more at the 
process of creating software than at the 
engineering required to create it. 

Despite its relative simplicity, agile 
development experts agree that certain 
bridges must first be crossed before an 
organization can implement Scrum (and 
other agile methods) successfully. 

Scrum is best utilized for developing 
software products that would otherwise 
fail using a more traditional approach to 
project management, according to Vic- 
tor Szalvay, CTO of the Scrum business 
unit at CollabNet. Among the factors is 
the complexity of the project. 

"Are requirements changing? Is the 
technology squishy? Where you're inject- 
ing uncertainty, the project becomes non- 
deterministic, and that's where Scrum is 
the best fit," he said. Projects that are sim- 
ple, highly repeatable, and with little risk 
and uncertainty, can be done using more 
traditional "waterfall" methods, he added. 
After an organization makes the deci- 
sion to move to Scrum and agile, it must 
first have an understanding of what it's 



getting into with the framework before 
trying to implement it. Moving to agile 
development, and particularly Scrum, 
involves a major change in the way 
development shops work. As the old say- 
ing goes, "People don't resist change, 
they resist being changed." 

One of the first keys to gaining the pro- 
ductivity benefits that Scrum promises is 
to get total buy-in, whether from a small 
team doing a pilot project or an organiza- 
tion-wide shift. The experts interviewed 
for this story agreed that it is important to 
have both bottom-up and top-down sup- 
port before beginning to work this way. 

"You have to understand when you 
move to agile methodologies, there will be 
a learning phase that should be accounted 
for in the planning," said David Vidoni, 
director of product management at BPM 
software maker Pegasystems, which tran- 
sitioned to Scrum and agile development 
about a year ago. "In situations where you 
don't have buy-in, that's where you run 
into problems." 

Ideally, an organization will have a 
team of developers that wants to work in 
a Scrum and agile environment, along 
with a higher-level executive who under- 
stands the benefits to the business and 
will champion the effort. "Bottom-up 
alone will get squashed because the 
higher-level individuals will feel threat- 



ened, while top-down doesn't work 
because there's too much organizational 
change involved," said Szalvay. "It's best 
if it spreads organically; people will want 
to do it." 

A top-down approach, according to 
Eli Lopian, CEO of Typemock, tells 
people what the organization wants, but 
usually lacks guidance as to how they 
should behave in their new roles. A bot- 
tom-up approach is better, he said, 
because the developers want to learn the 
practices, get the tooling and become a 
more responsive, professional team. 

But for this to succeed, "You need a 
very strong champion," he said. Type- 
mock is a provider of commercial unit- 
testing tools that has adopted Scrum and 
agile development. 

THE JOURNEY BEGINS... 

Once the decision has been made to use 
Scrum (either on the team level or 
throughout the organization), it is 
important to set a baseline as to what it 
means and what everyone's roles are. 
Because of the changes in how people 
work, Scrum is as much a human 
resource issue as it is a technical one. 

"You're talking about changing where 
people will sit, who they will be working 
with and how they work, and you need 
top-level support for that. But you need 



developer support as well. They might 
have had a bad prior experience with agile, 
or a fear of the unknown," said Szalvay. 

Training is important for success, 
the experts said. Vidoni said that when 
the company transitioned to Scrum a 
year ago, it brought in Scrum creator 
Jeff Sutherland and put the develop- 
ment team through two days of training 
to get a baseline. This way, "at the out- 
set, everyone had a level understand- 
ing," he said. 

Getting the team up to speed at once 
is important, agreed Richard Cheng, 
managing consultant at Excella. "Bring 
in someone — either coaches, or with hir- 
ing — who knows what they're doing. 
People who really get agile generally 
come to agreement as to how things 
should be done." 

Szalvay recommends starting with a 
pilot team to win support of the higher- 
ups in the organization by demonstrat- 
ing success. "Pick a high-visibility pro- 
ject, where you can allocate people to a 
cross-functional project team," he said. 

"There can be no silos. You need all 
the roles represented [in the project] in 
real time. Then, you try to demonstrate 
the same level of success that's visible up 
and down the organization. A lot of ben- 
efits can come from this kind of realistic 
continued on page 24 ► 
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HOW DO YOU KNOW IF YOU'RE DOING SCRUM? 



In 2007, cell phone maker Nokia created a test organizations could use to see if they were actually doing Scrum or not. 
There are two sections to the test: 



Section I: Are you doing iterative development? 

• Iterations must be time-boxed to less than four weeks 

• Software features must be tested and working at the end of each iteration 

• The iteration must start before the specification is complete 

Section II: Are you doing Scrum? 

• You know who the product owner is 

• There is a product backlog prioritized by business value 

• The product backlog has estimates created by the team 

• The team generates burn-down charts and knows its velocity 

• The are no project managers (or anyone else) disrupting the work of the team 

—David Rubinstein 
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< continued from page 23 

approach." 

Pat Guariglia, founder of 
ElegantAgile.com and a certified 
ScrumMaster, suggested in his blog 
choosing a project with "medium criti- 
cal ty" as a pilot. Too little criticality 
means upper management will blow off 
the project or not give it the resources it 
needs; too high criticality leaves little 
room for failure, placing too much pres- 



sure on the pilot team. 

Vidoni cautioned against setting expec- 
tations too high too soon. "You need to get 
into the rhythm of the format. You should 
give yourself months to adjust to it before 
you look for the productivity gains." 

Joe Little, Certified ScrumMaster, 
agile coach and managing director of 
Kitty Hawk Consulting, recommends 
that teams beginning down the Scrum 
path be co-located for a while — about six 



sprints, he said. Further, he would not 
use Scrum tools to get started. 

"I would learn it with a [whiteboard] 
in the team rooms," he said. "Most peo- 
ple later on, with distributed activities, 
would need some kind of Scrum tool. If 
you're widely distributed — which I 
wouldn't be — you need a tool. But I 
don't think it's the key to success." 

One aspect, however, that is seen as a 
key to success is doing Scrum by the 



book at first. "Everything is there for a 
very good reason," Szalvay said. "You set 
up responsibilities for the product own- 
er and team. When people say they don't 
want to name a product owner, that 
leads to all kinds of issues. A product 
owner makes priority decisions, and you 
need one person to be responsible to the 
organization and its customers for that 
priority. Or, they say they don't want to 
co-locate teams. Then they won't gel, 
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and it leads to bad ramifications." 

Yet TypeMock's Lopian admitted his 
company uses a hybrid mix. "We don't 
have the team and project owner and 
ScrumMaster definitions," he said. "We 
use managers to think about what needs 
to be done." 

There are two schools of thought on 
Scrum, according to Jez Humble of 
ThoughtWorks Studios, which make 
development tools for use in agile shops. 
First is the school that says you have to 
do all of it, or you're not doing it proper- 
ly. The other is doing what he called 
"cowboy agile" due to customizations. 

Szalvay suggested that people wait 
until they have a firm understanding of 
Scrum and the process before they start to 
tailor it. "This way, they're doing things 
intentionally and not unwittingly." He also 
cautioned against doing "Scrum, but..." 
which he explained as "doing Scrum, but 
not this part of it or that part of it." 

CUSTOMIZING SCRUM 

Excella's Cheng said Scrum can be 
tweaked to an organization's needs, "but 
don't lose the heart of it." 

"It's like cooking," he explained. 
"When you learn to cook, you follow a 
recipe. If it's not to your liking, you 
tweak it so it comes out good. But it 
could also turn out inedible." 

But, like cooking, once you have the 

ingredients in place, it's important to 

continued on page 26 ► 
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BY DAVID RUBINSTEIN 

Organizations looking to get started with agile software 
development often turn to Scrum as a place to start because 
of its simplicity. It is a framework for creating a development 
process but does not prescribe engineering practices. And, as 
Certified ScrumMaster Joseph Little put it, "That's not a 
bug, it's a feature." 

Before putting Scrum into place in an organization, Little 
said it's critical to understand the values and principles behind 
the steps, or you won't get the desired result. It's like dancing, 
he added: "If you're not feeling the music, you can do the 
steps, but it won't be pretty." 

The Scrum Alliance lists four core principles based 
on 2001's Agile Manifesto: 

• Individuals and interactions over processes and tools 

• Completed functionality over 
comprehensive documentation 

• Customer collaboration over contract negotiation 

• Responding to change over following a plan 

Scrum itself is made up three roles, four ceremonies and 
three artifacts, according to the alliance. 

The roles are product owner, ScrumMaster and team. 
The product owner is responsible for the business value of 
the project. The ScrumMaster ensures the team is func- 
tional and productive. The team self-organizes to get the 
work done. 
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The ceremonies are: 

• Sprint planning: The team meets with the product 
owner to prioritize the work to be delivered during a 
sprint 

• Daily scrum: The team meets each day to share 
struggles and progress 

• Sprint reviews: The team demonstrates to the prod- 
uct owner what it has completed during the sprint 

• Sprint retrospectives: The team looks for ways to 
improve the product and process 

The artifacts are the product backlog, the sprint backlog 
and the burndown chart. 

The product backlog is a list of items that can be added or 
deleted from the project at any time. The backlog is priori- 
tized, with highest-priority items worked on first. The lower- 
priority items are loosely defined but are revisited and 
refined as they work their way up the priority list. 

The sprint backlog is the set of items from the product 
backlog that the team commits to completing during the 
timeframe of the sprint. 

The burndown chart is an at-a-glance look at the work 
remaining in the overall project. Some organizations main- 
tain two burndown charts: one for each sprint, and one for 
the overall project. 

"The key is getting results: making customers' lives better, 
making workers' lives better and having more fun," Little 
said. "It's not a religious, dogmatic thing." I 
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know how long to keep them on 
the stove. Time-boxed sprints 
are an essential part of Scrum, 
yet estimating how long a task 
will take can be problematic. 



"Sizing is one of the bigger 
learning curves," said Pegasys- 
tems' Vidoni. "Our approach to 
estimation was to take a set of 
baseline stories of various com- 
plexities and to size new tasks to 



that reference point." 

Pegasystems has merged 
business processes with the 
development process, which 
Vidoni said provides the benefit 
of "really assessing what our 



business priorities are and not 
over-commit. We're able to bal- 
ance our tactical needs with the 
more strategic business needs." 
TypeMock's Lopian agreed 
that project estimation was an 
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early problem. Scrum advises 
that sprints take no longer than 
four weeks. At first, he said, "you 
don't know how to estimate how 
long a task will be. It could take 
half the time you allot for it, or it 
could be three times as long." 

Trial and error got them 
down from four-week itera- 
tions. "We went to one week 
about a year ago, but the devel- 
opment team didn't feel they 
could deliver value in that time, 
so we went back to two weeks. 
Now we're more mature, and 
we're back to one week." 

ThoughtWorks' Humble 
took it even one step further, 
with the advocacy of what the 
company is calling continuous 
delivery. "It's all about keeping 
software production-ready. 
Every four weeks isn't enough. 
Continuous delivery means 
having software production- 
ready all the time," he said. 

Yet Scrum doesn't prescribe 
any technical behaviors for 
achieving agile success, and that's 
either a flaw or a compliment, 
depending on point of view. 

"Scrum talks a lot about 
process and management of a 
project, but speaks very little 
about the engineering side," said 
Excella's Cheng. "XP talks more 
about that, with continuous inte- 
gration, test-driven develop- 
ment and pair programming." 

To address this, Cheng 
pointed out that the Scrum 
Alliance is offering Certified 
Scrum Developer classes. 
"They're trying to penetrate 
that area more," he said. 

But Humble, who said that 
"Scrum isn't sufficient to regu- 
larly deliver high-quality soft- 
ware" because it doesn't look at 
engineering practices, said the 
danger of Scrum expanding 
into technical practices is that it 
could lose its focus. "Scrum has 
a business focus, and it's easy to 
get going on," he said. 

The fact that Scrum does not 
prescribe engineering practices 
is "not a bug, it's a feature," said 
Kitty Hawk's Little. "It's not 
clear which will be the right 
ones" for any given organization. 

One of the key points of 
Scrum, said Cheng, is that it 
lets teams do what they do best, 
without heavy requirements. 
"You create partnerships as to 
why things are being built. You 
don't manage people, but give 
them goals and let them figure 
out how to get there." I 
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FROM THE EDITORS 

Opening up about security 

We are pleased that members of the Software Assurance Forum for 
Excellence in Code were active participants at the Black Hat 
Technical Security Conference and have begun to work together to 
devise new security best practices. 

SAFECode members, including giants Adobe and Microsoft, took time 
to listen to the security community during a brainstorming session about 
how to produce more secure software over the next decade. Those ideas 
will be incorporated into white papers and best practices documents. 

Not too long ago, most software makers would refuse to admit the 
presence of security vulnerabilities in their products. Secrecy didn't 
make us more secure. We're glad to see that more companies are talking 
about real-world security as well as sharing the details. 

It is even more encouraging that SAFECode members are willing to 
learn from one another. Many of these software companies sell products 
that work with each other's respective products. Cooperation is necessary 
if end users' safety is to be sufficiently protected. Hackers collaborate. 
We need to do the same. 

The more software makers take a full life-cycle approach to security, 
the better for all of us. Vulnerabilities can propagate down or up the 
stack, and security is only as strong as the weakest link, whether it's in 
operating systems, off-the-shelf applications or custom code. 

We hope that SAFECode 's technical committees have learned from 
the Black Hat experience, and that those suggestions are put to good use. 

Develop your master plan 

Organizations looking to move to agile development practices — specif- 
ically Scrum — are encouraged to bring in trainers, or Scrum Masters, 
to get them started. This is the shared opinion of the experts interviewed 
for our special report on Scrum that begins on page 23 of this issue. 

But did you know that students need only take a single two-day course, 
and pay a relatively small fee, to earn the Certified ScrumMaster label? 

We understand that the concepts of Scrum are not difficult to grasp 
and the terminology is not overly confusing. But can anyone really 
become a master of anything in just a couple of days? We don't believe 
so, especially not when organizations depend on those newly minted 
ScrumMasters to guide their agile practices. 

If you're with an organization moving to agile methodologies like Scrum, 
we agree that it's a good practice to bring in an expert. But look beyond the 
certification to the person's actual work history. Experience matters. Has he 
or she led many Scrum teams before? If your organization is doing distrib- 
uted development, has the ScrumMaster had experience managing agility 
under those circumstances? What if you need help to bring in a more tech- 
nical agile process, such as XP, with Scrum? Has he or she done that before? 

Our industry is all too quick to hand out certifications, where real- 
world education and proven work experience seem less important than 
the ability to pay the testing company for a couple of classes and an exam. 
One class we found said, "Prior experience with Scrum 'a plus.'" Not 
even mandated — a plus!! In theory, you could sign up for the class on 
Monday with no Scrum background, take the class, take a test, write the 
check and be a Certified ScrumMaster before Friday. 

We urge the Scrum Alliance, which oversees this certification, to 
establish serious software development prerequisites before letting 
someone take the test and become a Certified ScrumMaster. Require — 
don't suggest — that the candidate show he or she has worked for a num- 
ber of years implementing Scrum in diverse organizations with different 
development processes. 

This way, when organizations looking to get started with Scrum bring 
in a master to help with the transition, they can have some level of assur- 
ance that the person is indeed a master of Scrum, with more than a card 
or vest patch to prove it. I 



Irrational upsides 



It always took my friends and I until 
the middle of August to figure out 
summer. The grass had filled in, the 
water in the lakes and the pools had 
warmed up, we'd established new des- 
tinations to ride our bikes to, and we 
established new topics to argue end- 
lessly about. 

Then, seemingly only a day or two 
after we'd figured things out, 
"Back to School" banners 
would appear and suddenly 
our parents would start asking 
us about what supplies we'd 
need. We kids would be struck 
with the horror that in three 
weeks, at this exact minute, 
we'd be sitting at desks, not 
perfecting our behind-the- 
back Frisbee catch. 

Something similar used to 
afflict my software projects. Just as we 
felt good about our requirements docu- 
ments and the database structure, we'd 
have happy days lazily exploring our use 
cases. Then, seemingly only a day or two 
after we'd figured things out, Marketing 
and Sales meetings would appear, and 
suddenly our managers would start ask- 
ing us about what final tasks we needed 
to finish. 

We developers would be struck with 
the horror that in three weeks, at this 
exact minute, we were expected to have 
finished the error handlers, the first-use 
data initialization, and, horror of hor- 
rors, written an installer. 

Oh, how I hated writing installers. 
Even with several third-party vendors 
trying to create a decent workflow, there 
was no escaping the sheer drudgery of 
developing an installer in the days 
before virtual machine "snapshots" of 
Windows became easy and quick. I once 
took an "easy money" contract for a 
moderately complex installer; I imagine 
that it took no more than 40 hours over 
the course of a few weeks, but the mem- 
ory of grinding out the corner cases still 
sticks with me. 

Installers are not the only necessary 
pain involved in deploying an applica- 
tion (there are also technical docu- 
ments, final tests of non-debug builds, 
quadruple-checked distribution builds, 
etc.). The rise of Web applications has 
made many of these burdens less trau- 
matic (teams that botch a deployment 
to the Web probably have less finger- 
pointing than the project I was on that 
ordered 5,000 then-quite expensive 
CDs that were missing one of the data 
files). But it is in the nature of humans 
to both put off unpleasant work and 
discount the effort required for 
unpleasant work. 

This is one of the things explored in 
"The Upside of Irrationality," a recent 
book by Dan Ariely. In it, he extends 
and finds practicality in the emotional 
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biases that he explored in his best-sell- 
ing prior book, "Predictably Irrational." 
Ariely is a behavioral economist, which 
I take to mean is an economist who 
embraces the heretical position that 
humans are not perfectly rational evalu- 
ators of risk and reward. 

Psychology experiments with non- 
intuitive results are inherently interest- 
ing, doubly so when the 
results seem to go against 
our self-interest. (Plus cross- 
word puzzle enthusiasts 
need to stay up to date with 
words like "contrafreeload- 
ing," a term that refers to 
"the finding that many ani- 
mals prefer to earn food 
rather than simply eating 
identical but freely accessi- 
ble food.") Even experi- 
ments that support our expectations 
can be hilarious in their clarity: People 
paid to snap together "Bionicle" toys 
only to have them disassembled and 
handed back for the next round are less 
motivated than those given fresh sets 
and whose assemblages are put away 
for a (slightly) longer lifetime. 

The first half of the book focuses on 
ways that we fool ourselves in the work- 
place, and it discusses several tropes that 
are familiar to software developers, par- 
ticularly the "Not Invented Here" syn- 
drome, how we overvalue what we 
make, and how bonuses affect motiva- 
tion. The snap-together toy experiment 
had to do with the importance of feeling 
that one's labor is meaningful, which I 
think certainly resonates with software 
developers. 

The second half of the book focuses 
on more personal issues, such as adapta- 
tion to our circumstances, dating and 
empathy. In the section on dating, he 
discusses online dating sites as a "failed 
market," with many obvious parallels to 
the online market for technical jobs 
("Select the checkboxes that indicate 
your areas of proficiency. . ."). 

The book is a quick read, and is 
padded significantly by footnotes and 
exhaustive acknowledgements (well, I 
read it on a Kindle, so "bulk" is a bit of 
a misnomer). By analogy, one can apply 
the book's lessons to the success of agile 
development: the shift of tests from 
ancillary to integral, the incremental- 
ism, the appreciation of aesthetics in 
code creation, and the emphasis on the 
coder as more than a faceless "unit of 
effort." 

Reading outside the strict necessities 
of work and education is one of the joys 
of summer, and Ariely's book works 
nicely at the beach. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 
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Gimme better tools, please 



Integration Watch 



In the early part of the 1990s, getting 
sophisticated development tools to do 
much was difficult, because hardware 
was simply not powerful enough to do 
much heavy lifting. Lucid and Center- 
line were two companies that went bust 
in part because hardware could not keep 
up with their ambitions. 

Today, however, the reverse is true: 
Hardware is under-used in 
development. To my eye, tools 
have not advanced enough. 
The following features, I think, 
should be standard, rather 
than rare or non-existent. 

IDEs. Designed to make 
hard things easier, IDEs now 
make easy things hard. Just 
try to pop open an editor, type 
in some code, and do a quick 
compile-and-run cycle. This 
is impossible today. 

I am presently in the middle of a five- 
way review of Java IDEs. They all 
require more or less this sequence of 
steps: Create a project, determine the 
type of project to create (Java desktop, 
Java EE, JSP, etc.), create a directory 
structure that matches the project 
namespace, identify where compiled 
classes go, then finally create the file. 
The result is that quick, exploratory pro- 
gramming is not supported. It should be. 

Second, most IDEs are incapable of 
dealing with misspellings. Type in the 
beginning of an identifier name, hit the 
smart-complete key combination, and if 
the IDE can't find a match, you're out 
of luck. The IDE knows from the com- 
pletion request that I expect it to have 
seen the name, so it should show a list of 
possibilities that include options with 




slightly different spellings. Spell check- 
ers do this all the time. IDEs could eas- 
ily do this. 

Third, why doesn't every IDE have a 
performance profiler built in? 

Debuggers. Even though develop- 
ers have wanted this for years, almost no 
debuggers (with very few exceptions — 
mostly expensive, specialized tools) 
allow stepping backwards 
through code execution. This 
should be utterly standard. 

The tool needs only to 
capture all changed variables 
and trace the execution for, 
say, the last 100 statements, 
and then save this data in a 
circular buffer. Then if the 
program hits an exception or 
a break point, developers can 
work backwards. Stack traces 
are about as close as most IDEs come to 
this today. That is, save for DTrace, we 
use the same technology for backwards 
stepping that we used in the 1980s. 
Surely tool vendors can do better than 
this. 

Another longstanding problem is the 
inability of debuggers to work across 
system edges. Send a data packet to 
another system and, to speak of, you 
have no way to follow its progress. Why 
not create debugging tools that can span 
systems so that you can watch data as it 
moves across systems — pause it, inspect 
it, modify it and so on — regardless of 
platform? 

Debugging multithreaded apps is still 
a horrid chore. There has been almost 
no progress in this area despite the 
advent of the multicore era. When an 
execution passes from one thread to 



another, most debuggers cannot follow 
the movement of the locus of execution. 
Why not? If this can't be done by the 
system due to the complexities of the 
specific application, how about allowing 
developers to specify a known sequence 
and have the debugger follow that? This, 
at least, would make message passing 
across threads easier to debug. 

Build systems. Of all primary tools, 
build systems are the least tuned to the 
needs of their intended users. Debug- 
ging Ant scripts or trying to bend Maven 
to do a task it does not expect highlight 
how fractious these technologies can be. 
Not only are they balky, with remarkably 
little support for debugging, but they do 
almost nothing automatically, save 
understand dependencies. 

For example, no build tool I know of 
automatically validates the final deliver- 
able against the inventory of files it 
should contain. The tool knows what 
files should be in there. Why is there no 
automatic validation option to make sure 
component files are in there and read- 
able, such as validating against the 
checksums to make sure I/O was done 
correctly? How about validating that the 
package contains no viruses? 

I don't want this to sound like I'm 
ragging on tools. I'm not. I am intensely 
aware of how superior tools today are 
when compared with their counterparts 
10 and 15 years ago. I also know that all 
the limitations I've mentioned can be 
solved manually by developers. But with 
four cores on my system and several 
times more RAM than I need for devel- 
opment, I'd sure appreciate more help 
from tool makers — far more than I'd 
care for yet another Web framework. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Supreme Court did the right thing 



The Court's mission is to rule on cases 
brought before it, not to create patent law 
or to make broad interpretations of the 
law when a narrow ruling can be applied. 

Their narrow ruling ("Confusion fol- 
lows resolution in Bilski case," July 15, p. 
13) avoids conflicts and reflects also the 
overall conservative approach to law that 
each Justice has regardless of their 
"political" conservative or liberal views. 

When the court can decide a case 
using the arguments of opposing coun- 
sel, it rules using those arguments and 
the scope of those arguments without 
going further. 

The Bilski case simply did not provide 
the broad scope you thought possible. You 
were looking for something grand and 
sweeping and did not have the proper 
narrow legal view of the case in question. 

The Court always takes the least nec- 
essary steps so that its decisions are clear, 



firm and applicable to future similar cas- 
es. Congress must remedy the patent laws 
if it can and then the Court will decide 
future cases using the changed laws. The 
Court's view of "similar" is far narrower 
than you like. Get used to it. 

Bruce E. Hog man 

Ft. Lauderdale, Fla. 

MICROSOFT'S LONG GAME 

It's funny that right after reading this 
article ("Cloud? Mobile? We get it," July 
1, p. 26), I watched Microsoft's World 
Partners Conference keynote where 
they went over their new Appliance 
model. In essence, big partners can now 
run a copy of Azure in their own data 
centers or the data centers they set up 
for large customers. 

This is most likely going to be very 
popular with government, financial, 



medical, and other verticals where data 
privacy and regulations have prevented 
migrations to the cloud environments 
centrally housed by vendors. Salesforce 
and Amazon provide a free software lay- 
er to get customers hooked on up-priced 
hosting and data transfer. Offering the 
same Appliance model as Microsoft 
would require them to look more toward 
traditional licensing business models. 

Microsoft, for now, is willing to forgo 
hosting/transfer revenues in favor of 
selling Azure licenses for large-scale pri- 
vate cloud implementers. It'll pay off. 

Paul Katz 

LimeLeap Solutions 

WHAT DO YOU THINK? 

SD Times welcomes feedback. Letters 
should include the writer's name, com- 
pany affiliation and contact informa- 
tion. Letters become the property of 
BZ Media and may be edited for space 
and style. Send your thoughts to 
feedback@bzmedia.com. 
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What developers need to know about the cloud 



Industry Watch 



Cloud computing has come front and 
center as a preferred option for 
application deployment. Yet a big ques- 
tion that has lingered is what it all means 
for developers? Should they care about 
the cloud? Isn't it simply another 
deployment option, like servers or 
mobile devices? 

A closer look reveals that cloud appli- 
cation development is a two- 
sided coin. There's develop- 
ing applications for the cloud, 
and developing applications 
in the cloud, and each 
requires developers to con- 
sider factors they wouldn't 
normally think about when 
writing code to be run on on- 
premise servers. 

Colleen Smith, vice presi- 
dent of software-as-a-service 
for development tool company Progress 
Software, said there are a number of 
keys to consider when writing applica- 
tions for (to be deployed in) the cloud. 

One important factor is in the area of 
the user interface. Developers writing 
applications to be used in the cloud must 
think about where people are accessing 
the application from (mobile device, 
iPad, desktop?), and if they will be con- 
nected and then disconnected. Further, 
developers must consider that different 
types of users will now have access to the 
application — potentially, anyone on a 
company's supply chain, including buy- 
ers, suppliers, customers and more. 

"UI flexibility is an important consid- 
eration," Smith said, as different people 
will expect the application to work in dif- 
ferent ways. 

A second factor for developers to 
think about is multitenancy. "As a ser- 




vice provider, you want to try to lower 
the cost of managing and maintaining 
the application. You need to build into 
the application the concept of support- 
ing multiple customers with a single 
instance of the application. This needs 
to be planned in the application archi- 
tecture and developed into the app," 
Smith said. 

Then there are issues of 
integration and workflow, and 
of security. With on-premise 
software, you know any other 
applications that need to be 
integrated are there and sta- 
ble, and as long as you have 
the APIs, you know you can 
integrate. But in the cloud, 
other applications might be 
on a different server, or in 
another cloud. Smith pointed 
out that after you use an image from the 
Amazon cloud and put it down, it will 
have a different IP address when you go 
to bring it up again. She said developers 
must take situations like that into con- 
sideration when coding, and that it's 
imperative to build business process 
flows into the application's business log- 
ic. 

As for security, Smith said, the data's 
sitting up there in the cloud, and devel- 
opers must consider who will have 
access to the data. For on-premise appli- 
cations, developers can leave encryption 
and permissions up to the IT staff. But 
Amazon won't do that for your hosted 
app, she said, so, if you're storing credit 
card information and have to follow PCI 
compliance, it's up to developers to take 
care of encryption. 

As for developing in the cloud or 
using cloud-based development tools to 



create your application, there are "a new 
breed of developers" who want to simply 
go to the cloud and access tools, sample 
applications and best practices guides, 
Smith pointed out. She said Progress has 
created "an arcade" of tools that reside 
in the cloud for developers to use. 

"When we give access to our cloud 
portal, the developer tools are available 
at no charge," she said. "That's probably 
the biggest shift in developing in the 
cloud. There is no installation, no down- 
load," and no upfront cost, she said. 
"There's a move away from high-priced 
development tools. The cloud says, 'Let's 
give access to developer tools and get 
paid when people deploy the system.' " 

Smith said that Progress has been 
doing that for a few years, and after see- 
ing revenues drop in the first year, the 
company now has established a steady 
revenue stream from the deployed 
applications. As an example, she said, 
perhaps the people using these cloud 
applications pay the developer or soft- 
ware company a dollar to use the soft- 
ware; Progress gets 20 cents for giving 
the developer access to the tools and 
support. 

The cloud has benefits on both sides 
of the coin, but developers need to 
behave differently and bring new per- 
spectives to the job for cloud deploy- 
ments to be truly successful. For now, 
Smith sees developers using the cloud as 
a sandbox to play in before they get seri- 
ous about developing and deploying 
commercial-grade applications there. 

But the forecast is for continued 
cloudiness for as far as the eye can see. I 



David Rubinstein 
SD Times. 



editor-in-chief of 



business Briefs 








EARNINGS: Microsoft announced record fourth-quarter revenue 
of US$16.04 billion for the quarter ended June 30, a 22% increase 
from the same period of the prior year. Operating income, net 
income and diluted earnings per share for the quarter were, 
respectively, $5.93 billion, $4.52 billion and $0.51 per share, which 
represented increases of 49%, 48% and 50% when compared 
with the prior-year period. The successful launch of Office 2010 
and strong performance from Windows 7, which the company said 
has sold more than 175 million licenses, were major contributors to 
the earnings. For the full fiscal year ended June 30, the company 
reported record revenue of $62.48 billion. Net income for the year 
was $18.76 billion, a 29% increase over the previous year . . . CA 
Technologies reported revenues of US$1,091 billion for its first fis- 
cal 2011 quarter, a 5% increase over the $1,044 billion posted for 
the same quarter a year ago. GAAP income from continuous oper- 
ations was $223 million, up 14% for the same year-ago quarter 
when $195 million in income was reported. The company attributed 
the revenue growth to sales generated from the acquisition of 
three other software companies: NetQoS, Nimsoft and 3tera. In 
the quarter, the company also divested itself of its non-strategic 



Information Governance business. Also, the company repurchased 
more than 2 million shares of CA stock for $40 million . . . SAP 
announced the completion of the acquisition of Sybase by SAP 
subsidiary Sheffield Acquisition Corp., paying US$65 per share 
for roughly 81 million shares of tendered stock. SAP said it will 
effect a short-form merger as quickly as possible, meaning that no 
further meetings of Sybase stockholders will be required. SAP will 
operate Sybase as a wholly owned subsidiary, and Sybase shares 
will no longer be traded on the New York Stock Exchange . . . IBM 
has entered into an agreement with the Wroclaw University of 
Technology in Poland to establish the first university cloud-com- 
puting center there. The university in turn will add courses focused 
on the cloud to more than 1,500 students. "The new cloud center 
will provide a common platform for students and professors, indus- 
try partners and government agencies to work on real solutions 
based on cloud computing that will align people and technology 
effectively," said Czeslaw Smutnicki, director of the Institute of 
Computer Engineering, Control and Robotics, Wroclaw University 
of Technology. IBM is looking to further develop this program with 
universities around the world. I 
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www.blackberrydevcon.com 
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North America 

Chicago 

8TH LIGHT AND 0BTIVA 

scna.softwarecraftsmanship.org 
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Reno, Nev. 
ACM SIGPLAN 

splashcon.org 

Interop Oct. 18-22 

New York 
TECHWEB 
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Silverlight Technology 



Full Scripting 
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DundasScript™ 



More Data 
Visualization Options 



OLAP Support 



Dundas Dashboard is a highly extensible and customizable 
dashboard solution, that integrates easily into your ASP.NET, 
SharePoint, Silverlight or other web application. It provides you 
with a unified view of key metrics and a new level of strategic 
insight and decision-making. 
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Letter from the Chairman 

Dear Colleague, 

Yes, you can build, market and sell an app for that! 

Software development for Apple's mobile platforms is hot hot hot. 
With more than 50 million iPhones sold, along with 35 million iPod 
touch devices and hundreds of thousands of iPads, there are oppor- 
tunities for every developer, every marketer, every entrepreneur, 
every ISV and every enterprise IT professional. 

Come to iPhone/iPad DevCon to learn how to 
succeed with your mobile apps development, 
deployment and marketing. 

iPhone/iPad DevCon is focused 100% on 
mobile apps development. Produced by BZ Media — publishers of 
SD Times, the newspaper for the software development industry — 
this is the most info-packed, most practical mobile-development 
conference you'll attend this year. 

At iPhone/iPod DevCon, you'll be able to choose from dozens of work- 
shops and technical classes to customize your educational experience. 
Come and learn what fits your needs, as our sessions are organized 
into four tracks suitable for you and everyone on your team: 

iPhone/ iPad Developer Essentials: These technical classes/work- 
shops are for all iPhone and iPad app developers, and cover all pro- 
gramming topics. 

Spotlight on iPad: These technical classes/workshops cover the 
specifics of migrating and creating apps for the new iPad 

Spotlight on Enterprise Apps: These technical sessions cover topics 
specific to developing apps for employees, business customers and 
partners, such as back-end integration corporate datacenter com- 
munications, ERP or CRM systems. 

Spotlight on App Marketing: These non-technical 
classes/workshops are for business owners, entre- 
preneurs and marketers, including how to maxi- 
mize sales through Apple's App Store. 

iPhone/iPad DevCon is filled with technical 
sessions — but that's not all. In our exhibit hall, you'll learn about the 
best tools, services and resources for Apple mobile apps developers. 
Mingle and network during coffee breaks and at our big evening 
reception. There's more, much more... this is the conference you 
won't want to miss. 

Join us for three days in San Diego and learn from the brightest 
minds in the iPhone/iPad development universe! I'll see you there! 



Alan Zeichick 
Conference Chairman 
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Event Schedule 

iPhone/iPad DevCon At-A-Glance 
Sunday, Sept. 26 

4:00 pm - 7:00 pm Registration Open 



Monday, Sept. 27 

7:30 am - 7:00 pm Registration Open 

7:30 am -8:30 am 

8:30 am- 10:00 am 

10:00 am- 10:15 am 

10:15 am- 12:00 pm 

12:00 pm- 1:30 pm 

1:30 pm -3:00 pm 

3:00 pm - 3:15 pm 

3:15 pm- 5:00 pm 

5:15 pm-6:30 pm 



Continental Breakfast 

Morning Workshop 

Coffee Break 

Morning Workshop (continued) 

Lunch Break 

Afternoon Workshop 

Coffee Break 

Afternoon Workshop (continued) 

Lightning Talks and Pizza 



Tuesday, Sept. 

7:30 am - 7:00 pm 

7:30 am -8:30 am 

8:30 am - 9:45 am 

10:00 am- 11:00 am 

11:00 am- 11:15 am 

11 :15 am -12:30 pm 

12:30 pm -2:00 pm 

2:00 pm -3:1 5 pm 
3:15 pm-3:45 pm 

3:45 pm - 5:00 pm 
5:1 5pm -6:45 pm 



28 

Registration Open 
Continental Breakfast 
Technical Classes 100 
Mike Lee Keynote 
Coffee Break 
Technical Classes 200 
Lunch Break 
Tabletop Exhibits Open 
Technical Classes 300 
Coffee, Ice Cream, 
Tabletop Exhibits Open 
Technical Classes 400 
Attendee Reception, 
Tabletop Exhibits Open 



Wednesday, Sept. 29 

7:30 am - 4:00 pm Registration Open 

7:30 am - 8:30 am Continental Breakfast 

8:30 am - 9:45 am Technical Classes 500 

1 0:00 am - 1 1 :00 am Aaron Hillegass Keynote 

1 1 :00 am - 1 1 :1 5 am Coffee Break 

1 1 :1 5 am - 1 2:30 pm Technical Classes 600 

1 2:30 pm - 1 :30 pm Lunch Break 

1 :30 pm - 2:45 pm Technical Classes 700 

2:45 pm - 3:00 pm Coffee Break 

3:00 pm - 4:1 5 pm Technical Classes 800 

4:1 5 pm Conference Closes 
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Mike Lee 

Tuesday, September 28 
10:00 am- 11:00 am 

Mike Lee, the world's toughest pro- 
grammer, is the founder and CEO of 
United Lemur, a philanthropic revolu- 
tion disguised as a software company. 
Mike also cofounded Tapulous, whose titles include Tap Tap 
Revenge and Twinkle. Prior to iPhone, Mike cut his teeth and 
won an Apple Design Award at Seattle-based Delicious Monster 
Software. 

Mike is originally from Honolulu, is a popular blogger and 
occasional pundit, and has been seen on twitter as bmf. His last 
known day job was as a Senior Engineer at a very large company 
in Cupertino marketing magical products. 




Wednesday, September 29 

Aaron Hillegass Keynote • 1 0:00 am - 1 1 :00 am 



Aaron Hillegass 

Wednesday, September 29 
10:00 am- 11:00 am 

Aaron Hillegass is the CEO of Big Nerd 
Ranch, which he founded in 2001 . He 
started programming at the age of 1 
in the basement of the Oregon Muse- 
um of Science and Industry. He was a a developer trainer at NeXT 
in 1 995-1 997. NeXT was bought by Apple, so he left in June of 
1997 to create ClassMAX.com, the search engine for classes and 
seminars. After leaving ClassMAX during the late 1990s, Aaron 
went on to become one of the best WebObjects programmers on 
the planet; he was especially known for his skill deploying 
WebObjects applications. In 2000 Aaron was asked to teach 
Apple engineers how to write apps for Mac OS X. 

In 2007, MacTech named Aaron one of the top 25 most influen- 
tial people in the Mac community. An accomplished speaker, 
Aaron has lectured at Apple's Worldwide Developer Conference 
(WWDC), ApacheCon, and C4. He also gave the keynote at the 
"Voices That Matter" iPhone Developers Conference in 2009. 

Aaron is also a best selling author. "Cocoa Programming for Mac 
OS X"was published in December of 2001. "Cocoa Programming," 
now in its third edition, is widely considered the Bible in the indus- 
try. He is also the co-author of "Core Mac OS X Programming," 
which was later renamed "Advanced Mac OS Programming." 
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Monday, September 27 

Sponsor Lightning Talks and Pizza • 5:1 5 pm - 6:30 pm 

Learn something new in a handful of short, targeted talks. 

Tuesday, September 28 

Mike Lee Keynote • 1 0:00 am - 1 1 :00 am 



Exhibit Hall • 12:30 pm - 6:45 pm 

Come visit the growing and 
evolving network of technical 
experts in our Exhibit Hall. 



Attendee Reception • 5:15 pm - 6:45 pm 

Open to all attendees, the reception 
offers a chance to network with fellow 
professionals in a casual atmosphere. 






iPhone/iPad 
DevCon20lO 



Workshops Monday, Sept. 27 



Full Day Workshops 
8:30 am - 5:00 pm 



W1 • Coming Up to Speed on 
Objective-C and 
Cocoa Fundamentals 
By Daniel Steinberg 

You already know how to program and you have 
a great idea for an iPhone or iPad app. So, how do 
you make the transition to this new platform? You 
need to learn the language and key techniques of 
programming for iPhone 4.0 and then you'll be off 
and running. We'll begin this hand-on full-day work- 
shop with an introduction to Objective-C, the lan- 
guage of iPhone OS. You'll learn to create objects in 
code, send messages between them, and manage 
the memory. 

Once you've mastered the square brackets and 
colons you'll learn to create and connect objects 
without writing any code. We'll spend the second 
portion of the workshop learning to use Nibs — a 
freeze dried graph of objects. You'll create outlets to 
communicate from your code to the nib and actions 
to communicate in the other direction. 

By the end of the day you will understand the key 
patterns used in iPhone development. You'll create 
view controllers whenever you need to present a 
new screen. You'll understand the role of the File's 
Owner and create nib files ruled by view controllers. 
You'll find yourself reaching for delegates rather than 
subclasses. In short, you'll be an iPhone developer. 

You will need the latest public version of the 
development tools and iPhone OS installed on 
your Mac. 

W2 • From JavaScript to iPhone 
SDK Programming 
By Danny Goodman 

JavaScript is arguably the most popular pro- 
gramming language in use today, having attracted 
legions of Web content authors and designers to 
produce dynamic Web pages that simulate applica- 
tions — Web apps. Because many JavaScript pro- 
grammers came to programming without formal 
computer-science training, making the transition to 
creating native iPhone OS apps (with the associated 
benefits of programming the hardware and built-in 
apps) means learning a great deal of new material 
even to get started. 

This workshop prepares you to meet the chal- 
lenges of learning C, Objective-C, the Xcode inte- 
grated development environment, and Cocoa 
Touch programming for the iPhone and iPad. Learn 
how to convert your current thinking about pro- 
gram design and structure to ways best suited for 
creating native iPhone/iPad apps in the enterprise 
or for sale in the App Store. 

You'll learn how to manage projects in Xcode, 
and the workshop explains Objective-C terminolo- 
gy for classes, delegates, the model-view-controller 



pattern, and other concepts that most entry-level 
iPhone programming instructions assume you 
already know. Take away the basics of data typing, 
pointers and memory management issues — con- 
cepts alien to the JavaScript world. At the end, you'll 
receive Objective-C and Cocoa Touch recipe equiv- 
alents for familiar JavaScript language tasks. 

W6 • Succeed with iPhone/iPad 
Apps Marketing 
By Griffin McGrath 

This full-day class (configured as two half-day 
workshops) will focus on three areas of the app 
economy: specific "critical success factors" of top- 
ranked iPhone applications in the iTunes App 
Store, building a business plan for iPhone/iPad 
apps, and best practices in marketing your apps for 
greater success. 

Using both quantitative and qualitative data, 
this session will help developers and business exec- 
utives more fully understand what drives installa- 
tions and repeat use of their products. By under- 
standing what application consumers find the most 
compelling about their apps, you can tailor your 
products to enhance their market position and 
increase downloads and usage. 

The findings come from an extensive research 
study conducted at Quinnipiac University that 
evaluated nearly 800 applications from almost all 
categories of the iTunes App Store. By analyzing 
individual application rankings, numbers of 
reviews, release dates and numbers of versions, 
and comparing them to third-party reviews by con- 
sumers and independent reviewers, the research 
team has found some unique insights into con- 
sumer behavior. 

Before you create an app, though, it is important 
to understand the business planning that is 
involved. It is no longer enough to code an app and 
release it hoping for a huge hit. There are strategies 
for everyone to consider if they wish to make it to 
the top of the more than 200,000+ applications 
now available in the App Store. Learning how to 
properly plan for success and how to market an app 
is key to getting downloads. 

You'll learn how to leverage the unique data sets 
that the researchers have accumulated, allowing 
you to tailor your business plans and products to 
better fit the "success" model of top developers. 

Half Day Workshops 
8:30 am- 12:00 pm 

W3-AM • Three Hello Worlds in 
Three Hours 
By Joe Pezzillo 

In this hands-on workshop, you'll learn how to 
start with iPhone development using the classic 
"Hello, World" example using three standard iPhone 
project types. 

The first is a basic UlView based project that 



starts with an empty canvas. You'll learn about 
using Xcode project templates, using Interface 
Builder and connecting Ul objects to your code, 
basic "Caveman Debugging" techniques, and some 
gentle general introductions to Cocoa, as well. 

The second project is based on the workhorse 
UlTableView class, and moves you up the learning 
curve with introductions to the Delegate and 
DataSource design patterns, the use of dot syntax 
and another workhorse class, NSString. 

The final example in the workshop is perhaps 
the most powerful class in all of Cocoa, UlWebView. 
Here, you'll learn just how easy it is to load a URL in 
a fully rendered web view in your app to start 
unleashing the power of WebKit. 

Along the way you'll learn about memory man- 
agement, collections and Cocoa Foundation frame- 
works, simulator vs. device debugging, and more. 

Time permitting, the instructor will present "Top 
10 Tips & Tricks for New Cocoa Developers," a pres- 
entation that will further accelerate your scaling the 
"learning cliff." This workshop presumes you have 
some previous programming knowledge, but are 
just getting started with your very first iPhone and 
Xcode projects. 

1:30 pm -5:00 pm 

W3-PM • Using Core Animation to 
Build Complex and Attractive 
Interfaces 
By Nathan Eror 

Core Animation plays an integral role in the 
iPhone user interface and is responsible for all 
drawing in iPhone OS. Careful use of animation can 
make even an average app a joy to use. In this work- 
shop you will learn how to effectively apply the fea- 
tures of Core Animation in your own apps. 

After an introduction to the principles behind 
Core Animation, you will learn how it is used in UIKit. 
Then, we will dig into the meat of Core Animation 
and how to use it effectively. Through multiple exam- 
ples, you will learn how to tame some of the com- 
plexities of the Core Animation API. By the middle of 
this workshop, you will be comfortable with Core 
Animation, and your apps will run more smoothly 
and be more visually appealing. 

Core Animation puts a tremendous amount of 
graphical power at your fingertips. You can accom- 
plish quite a bit with very little effort, but once you 
decide to step out of Apple's pretty little sandbox, 
things get more complicated. In the second half of 
the workshop, we'll will get out our tools and make 
that sandbox a lot bigger. After an overview of the 
key pieces of the Core Animation API, we will create 
utility code to help us build complex, interdepend- 
ent animations. This code will help us manage dele- 
gate callbacks, complex grouped animations, 
chained sequences of animations and much more. 
Before you know it, your Ul elements will be bounc- 
ing, popping, fading and sliding on the screen with 
a single method call. 

iPhone/iPad 
DevCon20lO 
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1 00 CLASSES » 8:30 - 9:45 am 

1 02 • Graphic Design Techniques 

for Developers 
By Robert Strojan 

So you've read Apple's Human Interface Guide- 
lines, developed the ultimate navigation hierarchy, 
and refined your user interface for maximum usabil- 
ity. Now, how do you finalize your Ul with the type of 
shine and polish that will set it apart? How can you 
create the beautiful tactile buttons, embedded text 
and glossy toolbars typical of Apple's iPhone apps? 

In this session, we'll look at popular design ele- 
ments in well-designed iPhone apps, and you'll learn 
techniques to recreate them using the freely distrib- 
uted GNU Image Manipulation Program (GIMP). This 
will be a hands-on session. Come with GIMP {link to 
www.gimp.org} installed and follow along. 

103 • Optimizing Data Caching 

for iPhone App Responsiveness 
By Jonathan Saggau 

Users of native iPhone apps, even those pulling 
data from "the cloud" expect a snappy experience. 
The "Death by a Thousand Paper Cuts" of a slow user 
interface is possibly the quickest way to disappoint. 
Learn how to apply embedded systems caching 
tricks to optimize the user experience within exam- 
ple apps while balancing the trade-offs as a result of 
caching data. 

105 • Mastering iPhone OS 4.0: 

What's New, What's Changed, Part 1 
By Daniel Steinberg 

The newest version of Apple's iPhone operating 
system is here. In this two-part class, we will dive 
deep into the new and changed functionality. In 
part one we'll learn to work with the retina display, 
gesture recognizers and blocks. We'll also look at 
how the new simulator allows you to say goodbye 
to ivars and embrace class extensions. 

106 • Making and Marketing Apps 

That Succeed 

By Michael Schneider 

Achieving consumer awareness and sales 
longevity for your iPhone app requires a lot of 
organization and some strategic planning. This ses- 
sion will show you how to incorporate marketing 
and business savvy into your design and develop- 
ment process, giving your app the best possible 
chance of succeeding in the App Store. In this ses- 
sion, you will learn: 

• How to select and perfect the best icon and title 
for your application 

• How to build mechanisms for users to communi- 
cate with you from within your apps 

• More effective ways to distribute promotional 
codes for your applications (and how best to use 
those codes) 



• How to use affiliate links to track the sources of 
your sales 

• Ways to build a community around your apps 

• The pros and cons of various pricing strategies 



200 CLASSES • 1 1 :1 5 - 1 2:30 pm 

201 • iPhone Development for 

.NET Developers 
By Ben Scheirman 

Just because you spend your day in Visual Stu- 
dio, doesn't mean you can't build iPhone apps with 
the cool kids! In this session, you'll learn all about 
Objective-C, Apple's Xcode IDE and the iPhone SDK 
for building iPhone applications. Your instructor has 
a strong background in .NET development, and will 
compare and contrast the vastly different styles of 
development. 

By the end of the session, you will have a solid 
understanding of how Objective-C is different from 
C#, how Xcode is different from Visual Studio, and 
ultimately how writing apps for the iPhone is prob- 
ably unlike anything you've done before. 

202 • BlockHead: Blocks in 

Objective-C 
By Jeff Biggus 

Blocks are coming to the iPhone and iPad! This 
session will go over how blocks work in Objective-C 
2.0 to get developers ready to make use of them in 
both a manual and garbage-collected environ- 
ment. New design patterns are open to those who 
know how to make use of blocks. Now that more- 
powerful mobile systems are becoming available, 
the ability to make use of this form of modularizing 
code will become more and more important. 

This new addition to C (and proposed for the C 
standard) is one more layer in what's becoming a 
large set of syntaxes fitting within one environment. 
It is the goal of this session to get developers fluent 
in blocks and to see beyond the syntax to the code 
designs that are made possible. 

You will be given sample code of varying 
degrees of complexity and in a number of different 
use cases, comparing how tasks would be done 
with and without using blocks. 

203 • Is It Real or Is It Virtual? 

Augmented Reality on the iPhone 

By Jonathan Saggau & Jonathan 
Blocksom 

With the new camera, compass and processing 
power of the iPhone 3GS and newer devices, it's 
possible to integrate the iPhone with even more of 
your users' everyday life using Augmented Reality. 
In this class, you'll walk you through a demo appli- 
cation for finding your hotel in a strange city. Learn 
how to use the orientation and magnetometer APIs 
to place virtual tags on objects in the real world. 



Apple's WWDC 
sold out in 8 days. 

Don't be left out of 
iPhone/iPadDevCon! 

Register TODAY! 

page 1 3 

Depending on weather, we might even head out- 
side to chase down that hotel! 

204 • Cooking with iAd from 

Soup to Nuts 
By Noah Gift 

Learn how to easily integrate Apple's iAd adver- 
tising management system into your existing 
iPhone application! In this talk we will take a cloud 
based web application, with a companion iPhone 
application, and integrate it into the iAd network. 

Code samples will be based on a cooking show 
formula, with an explicit recipe on how to convert 
an existing app to use iAd. Finally, we will cover the 
use of a third party framework that seamlessly 
switches between MobClix and iAd. 

We'll also teach you real world coding solutions 
for dealing with testing while developing for the 
iAd, and the semantics of dealing with asynchro- 
nous Banner Events, and potential errors. 

205 • Mastering iPhone OS 4.0: 

What's New, What's Changed, 

Part 2 

By Daniel Steinberg 

The newest version of Apple's iPhone operating 
system is here. In this two-part class, we will dive 
deep into the new and changed functionality. In 
part two we'll show you how to work with docu- 
ments, custom keyboards, multitasking, iAds and 
the new media APIs. 

206 • Push It Up: Mastering Apple's 

Push Notifications Service 
By Joe Pezzillo 

This class will walk you through how and why to 
add push notifications to your application and 
what's required on the server-side, with plenty of 
working sample code and specific examples to 
guide you through every step of the process. 
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300 CLASSES » 2:00 - 3:1 5 pm 

301 • Get Your iOS 4 Apps Moving 

with Core Motion 
By Jonathan Blocksom 

iOS 4 introduced the Core Motion SDK, a new 
framework for accessing sensor data from the 
accelerometers and iPhone 4 gyroscopes. This ses- 
sion will go through accessing and using this sensor 
data in your apps, differences in results for different 
devices, behavior and limitations of the underlying 
sensors and some cool applications now possible 
with iOS 4. 

302 • Dynamic App Data Updates 

via NSURLConnection 
By Danny Goodman 

Come explore the Cocoa Touch NSURLConnec- 
tion class as a way to have an app dynamically 
retrieve updated data from a server behind the 
scenes. Updated data may be in the form of XML 
data (e.g., frequently-changing lookup tables), 
HTML (e.g., periodic news bulletins and tips for 
users), images, or other data types. 

You'll learn how to design apps around the 
NSURLConnection class and its delegate methods 
as a way to eliminate the need to submit endless 
updates to the App Store. It allows a developer to 
keep an app's content fresh as often as needed. The 
class also demonstrates how to use network band- 
width and local caching most efficiently to prevent 
unnecessary downloads of server data that hasn't 
changed since the previous app launch. Included 
are demonstrations of blending these download 
techniques into user interfaces of actual iPhone 
apps currently on the App Store. 

303 •TANSTAAFL: Using Open- 
Source iPhone Ul Code 

By Jonathan Saggau 

Most every iPhone developer has said some- 
thing like this at one point or another: "If only Apple 
would release their photo viewer component, or 
perhaps their calendar Ul, or maybe their coverflow 
view, then life would be so much easier." Happily, 
several open-source developers have concluded 
the same and written code so we don't have to. 

In this class, you'll learn all about open-source 
libraries that mimic much of the Ul that you see in 
Apple's own iPhone applications. Learn the ins and 
outs of these components and leave with code that 
uses the image views available from the Three20 
framework, an open-source coverflow view called 
OpenFlow, and a recreation of Apple's calendar 
view called Kal. Apple has built it, the community 
has rebuilt it, and now you can use it in your app. 



305 • No Objective-C Required! 

Use Your Web Skills to Develop 

iPhone and iPad Apps 
By Jeff Haynie 

HTML, CSS and JavaScript are quickly becoming 
the development languages of choice for creating 
native iPhone and iPad applications. By using open- 
source platforms, Web developers can create apps 
for iPhone, Android and BlackBerry using a single 
codebase. 

In this session, you will learn: 

• All open source is not alike: How to select an open- 
source mobile development platform. 

• How to use mobile APIs for geolocation, video and 
social networking. 

• How to build a native user interface for iPhone 
applications. 

306 • Case Study: Designing, 

Building and Scaling Trapster 
By PeteTenereillo 

The founder and CEO of the popular Trapster 
application will talk about the challenges of build- 
ing GPS-based apps. You will learn about the archi- 
tectural approach to Trapster, the unique design 
considerations for the iPhone specifically (including 
for iOS 4), and he will discuss issues like dealing with 
growth, user support, hosting and scaling costs, 
and designing for scale. Trapster, with more than 7 
million users, is a mobile service that lets users 
share the location of police speed traps using 
mobile phones and other types of devices. 

400 CLASSES » 3:45 - 5:00 pm 

401 • iPhone SQLite Techniques 
By Ben Scheirman 

If you're building a data-driven application on 
the iPhone/iPad, chances are you'll have to leverage 
SQLite. SQLite is a handy single-user relational data- 
base and gives you plenty of control and perform- 
ance with even large datasets. Unfortunately, the C- 
language API makes working with SQLite difficult. 

In this session, we will cover the basics of SQLite, 
how to deal with writable databases, and how to 
quickly and effectively query and store data using a 
higher-level API. Finally, you will learn how to man- 
age a growing and changing application by imple- 
menting database migrations to allow your data- 
base schema to evolve. 

This will be a heavy code presentation; all the 
code and materials will be provided. 

402 • The iPhone OS Audio 

Landscape 

By Robert Strojan 

Can you hear me? Can you hear me now? Learn 
the ins and outs of audio on the iPhone as we look 
at Audio Sessions, audio formats, and what you 



should be thinking about before ever playing any 
audio. Then we'll explore each of the iPhone's audio 
APIs and when to use them. 

We'll analyze "Hello, World" code with the easy- 
to-use AVAudioPlayer as well as the game design- 
er-preferred OpenAL. Then we'll spend significant 
time navigating through the dark, mysterious 
world of Audio Units to start you on your way to 
developing powerful audio-centric apps. 

403 • Connecting Apple's iPhone to 

Google's Cloud 

By Noah Gift & Jonathan Saggau 

Cloud computing and software development for 
handheld devices are two very hot technologies 
that are increasingly being combined to create 
hybrid solutions. In this class, you'll learn how to 
connect Google App Engine (Google's cloud com- 
puting offering) with the iPhone, Apple's mobile 
platform. You'll also see how to use the open-source 
library, TouchEngine, to dynamically control applica- 
tion data on the iPhone by connecting to the App 
Engine cloud and caching that data for offline use. 

404 • Custom UlView Drawing with 

CoreGraphics 
By Michael Gile 

Come learn about low-level drawing with the 
Core Graphics framework. Core Graphics provides 
the fundamental drawing capabilities used to cre- 
ate path-based drawings as well as many other 
transformations and screen output capabilities. 
You'll learn how to create custom UlView subclasses 
to take responsibility for drawing their own on- 
screen rendering. In addition, we will cover meth- 
ods to create aesthetically pleasing visuals such as 
shine effects and gradient path fills. 

405 • From the Trenches — Lessons 

Learned in Enterprise iPhone 

Development 
By Joe Pezzillo 

Joe Pezzillo spent 1 8 months developing iPhone 
applications for a Fortune 100 financial services 
company and offers a baker's dozen hard-won les- 
sons that'll help you and other enterprise develop- 
ers who are working in this rapidly growing field. 
He'll cover topics including: 

• Staffing, division of labor and other personnel 
issues 

• Project management, setting realistic expecta- 
tions and justifications 

• Code architecture choices, frameworks & libraries, 
SCM and other resources with a specific recom- 
mendation for application development 

• Certificates, SCEP and provisioning 

This session does not present any code, instead 
is intended as a discussion of enterprise deveop- 
ment topics, although it does include mentions of 

(continued) 
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some specific libraries that may make your life easi- 
er as an enterprise developer. 

406 • Contracts, Licenses, 

Intellectual Property and Other 

Legal Issues 

By Michael Schneider 

iPhone development presents an unprecedent- 
ed opportunity for individuals and small companies 
to bring products to market, but independent 
developers often don't consider the legal issues 
involved with their business until it is too late. This 
session is an overview of legal issues you'll face 
when creating and bringing applications to market. 

You'll learn about the intellectual property pro- 
tection available for your applications, and which 
methods of protection make the most sense in the 
context of mobile application development. We will 
also discuss the importance putting solid contracts 
in place with your employees and contractors to 
ensure that you get the rights you need in their 
work product. Other topics include, when to create 
your own end user license agreement and the steps 
to take when you believe someone has infringed 
your intellectual property rights. 

500 CLASSES » 8:30 - 9:45 am 

501 • Core Data tips and Tricks 
By Saul Mora 

Core Data isn't your father's database. In fact, 
you're not really supposed to think about it as a data- 
base. We'll go over the stack, what each layer means 
to you, and how to get up and running with Core Data 
fast and easy! We'll also cover some simple debug- 
ging tips, optimizing your lookup performance, and 
how to properly deal with multithreading. 

502 • Moving to the iPad: What You 

Need to Know 
By Daniel Steinberg 

The iPad is not just a bigger iPhone. Sure, there 
is a great deal of overlap in the APIs and coding 
techniques but the devices are fundamentally dif- 
ferent and you shouldn't just port your iPhone apps 
to it's bigger relative. This session will look at the dif- 
ferences in targeting the two devices and will high- 
light APIs and techniques that are particularly 
important on the iPad. 

503 • Mobile Data Synchronization 

with Any Database 

By Lee Barney 

iPhone applications can easily store data using 
either the core Data framework or by directly inter- 
acting with the SQLite database engine. This data 



can then be heavily used without delays involved in 
passing information back-and-forth between the 
device and a remote database. How then can data 
be kept in sync if it needs to exist on the device and 
a remote database? What if you don't need all of the 
data found in the database to exist on the device? 

This class helps you design and implement a 
synchronization utility that will work with the data- 
base management system of your choice. It could 
be Oracle, MySQL, Sybase or some other database. 
It could even be something completely different 
such as XML or other textual flat files. The data 
structure on the device won't even need to match 
the remote data structure. 

All of this can be done to create an easy-to-use 
sync utility you can use in any of your applications. 

504 • File Systems Security with 

iPhone OS 4.0 
By Michael Gile 

iPhone OS inherits a large set of robust security 
and encryption capabilities from its Unix heritage. 
In this class you'll learn about the current state of 
security in the latest version of iPhone OS. From the 
storage of network credentials in Keychain to the 
low-level cryptographic libraries, certificate man- 
agement and file encryption. We'll also go into the 
new features of iPhone OS 4.0 for file protection and 
big integer capabilities that should be of interest to 
any security-minded developer. 

505 • Designing iPad Applications 

for the 21 st Century 

By Mike Lee 

The introduction of the iPad has revolutionized 
how people think about, and interact with, comput- 
ers. Even in a post-iPhone world, these waves of 
change radiate into the very fabric of our work as 
the arbiters of software. 

Learn about the emerging principles of software 
design that contribute to the unique "iPadness" of 
software on the platform, and different ways of 
thinking necessary to apply those principles to your 
own work. 

We'll examine some applications from the App 
Store and discuss how well (or how poorly) they 
demonstrate these principles — or bring your own 
pending masterpiece and take the hot seat for a 
priceless (if humbling) peer review. 

506 • Marketing in the Social 

Media APPmosphere 
by Bobby Emamian 

After creating a few iPhone apps in the past year, 
it's amazing to look back and see what it took to 
make them happen. Not only are there creative and 
technical aspects involved, but the marketing is 
also crucial. It is important to bring value to the user 
in a way that engages them in order for them to 
become brand enthusiasts. 



With Facebook just releasing its new API, the 
way applications are built and marketed will forev- 
er change. Thus, it will be great to talk about the 
features and aspects of how incorporating Face- 
book into the applications will help generate viral 
campaigns. 

You'll learn from two case studies in this class, the 
BIG EAST conference basketball tournament app 
and the official CC Sabathia iPhone app. You will 
learn the possibilities that social media opens up 
when marketing their apps. Looking down one 
avenue is very easy to do, however. Mashing up 
what is available in the social media space is when 
viral campaigns are made. 



600 CLASSES • 11 :1 5 - 1 2:30 pm 

601 • Grow Your Advertising 

Business with Apple's iAd 
By Bobby Emamian 

Apple promises to make their iAd platform more 
interactive — without leaving the application, the 
user can tap an iAd banner and enter into a full- 
screen experience. Unlike other ads where the user 
is directed towards the Safari web browser, iAds will 
essentially be integrated into apps sold in the iOS 
App Store. iAd media ads provide full-screen audio, 
video, and gaming, and will truly place more of the 
vision of advertising into the users' hands. The 
major benefit: developers receive 60 percent of the 
revenue from advertising on applications. 

This workshop will focus directly on iAd media, 
helping you to be more effective with selling your 
products, reaching your target audiences, and max- 
imizing your revenues. The intuitive aspects of iAd 
will be built upon so that this new and exciting 
method of advertising becomes second nature. 

602 • The Tricorder is Here: Math 

and Science on the iPhone/iPad 
By Jeff Biggus 

This session will go over the many frameworks 
and libraries available to iPhone and iPad developers 
for doing math and science. In addition to third-party 
frameworks, Apple is also about to make available the 
Accelerate framework in iPhone OS 4.0, a powerful 
hardware-accelerated mathematics library. Useful for 
applications that are not themselves math- or sci- 
ence-oriented, such as graphics processing, presenta- 
tion and manipulation, game Al, and large data set 
processing, this background can make whatever app 
you're working on gain new levels of polish and func- 
tional depth. 

The first thing that Apple pointed out to develop- 
ers about the new iPhone OS 4.0 infrastructure was 
the Accelerate framework. It's a valuable resource that 
they are making available, but is generally an 
unknown quantity for most developers. This session 
will try to make it more approachable by going over 

(continued) 
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several use cases and breaking down the code to its 
bare essentials. 

Many high-quality third-party frameworks and 
libraries are also available to enhance doing scientific 
and mathematical work on the mobile platforms (and 
more besides now that such things as blocks are avail- 
able). Several such frameworks will be presented. 

603 • Ship Your App Now by 

Creating Hybrid Applications 

By Lee Barney 

Learning Objective-C can be a major hurdle for a 
beginning iPhone or iPad application creator. One 
solution that allows you to get your apps out the 
door and helps you learn Objective-C at the same 
time is to create a hybrid application. Hybrid appli- 
cations use HTML, JavaScript and CSS for much if not 
all of your application display and logic. There are 
several hybrid application libraries available online, 
both open and free as well as closed and for cost. 

This class helps you create your hybrid applica- 
tion using the first open-source, free and most high- 
ly developed hybrid application framework: Quick- 
Connect. A few of the ideas you will learn to imple- 
ment are: 

• Storing data on the device 

• Using HTML 5 to animate your interface 

• Displaying Maps in your application 

• Using audio and Video 

604 • Advanced Core Data: 

Building Your Own 

NSFetchedResultsController 
By Marcus Zarra 

In this talk, we will start with discussing the 
NSFetchedResultsController and how to properly 
apply it to a UlTableView. As part of that opening dis- 
cussion, we will be walking through some of the lim- 
itations and edge cases that have come up while 
using the NSFetchedResultsController. 

In the second part of this session, you'll learn 
how to develop your own replacement for the 
NSFetchedResultsController, and how to use that 
expanded functionality to provide a more robust 
solution for monitoring data changes in the Core 
Data stack and react to those changes. As part of 
this section, we will discuss using Core Data in a 
multi-threaded situation and how that impacts the 
monitoring of data. 

605 • Building Killer Universal 

Apps for iPhones and iPads 
By Daniel Steinberg 

There are iPhone apps, iPad apps, and apps that 
run on both. In this session you'll learn to take an 
iPhone app and convert it to a Universal app that runs 



on both the iPhone and iPad. Sure, your users can just 
run your iPhone app on the iPad but it just won't look 
right. We'll cover the key steps to producing a single 
binary that looks and feels right on each device. 

606 • The Science of Making a 

Successful Free App 
By Nitin Chitkara 

How can an indie developer succeed in an over- 
crowded App Store? How can you differentiate your 
app from the rest? App success is not based on pure 
luck; there is a science to it. 

With over 75% of the apps being paid, it's much 
easier to get to the top of the free app market. Get 
the inside scoop from one of the industry experts. 
See case studies of developers who have gone from 
a paid to free model, and how they used our analyt- 
ics data to enhance their app. Learn the characteris- 
tics of a successful free app, how to effectively drive 
revenue with a "freemium" model, and when and 
why an app should just go the paid route. 

Apps that succeed all have a few things in com- 
mon. Get the tricks of the trade and insight into the 
app market that you can't get anywhere else! 

700 CLASSES » 1 :30 - 2:45 pm 

701 • Designing the Details: 

What Makes Some Apps Stand Out 

Above the Rest? 
By Jen Gordon 

Amplifying your apps ability to attract its target 
audience is more challenging and important than 
ever. In this session we'll take a deep dive into the 
unique user interface characteristics of both iPhone 
and iPad that will give your app a wow factor. 

This how-to session will review a variety of 
examples illustrating best practices for: 

• designing eye-catching icons for iPad/iPhone 

• breaking out of the standard Ul 

• sound design 

• planning for animated transitions 

• appropriate use of animation 

The session will conclude with a practical "do's 
and don'ts" list to guide you on your next project. 

702 • iPhonify Your Web App: 

Understanding iPhone Web 

Development 
By Chris Bannon 

The iPhone has become a common device in 
the hands of your end users. You'll learn every- 
thing you need to know in order to build Web 
applications targeted for the iPhone. This session 
will give you an overview of the iPhone in general, 
including the specs, Ul and behavior. You'll learn 
simple tips to enhancing your current Web apps 
for the device and also look at building an iPhone- 
specific website. 



Plus, we will take a look at some popular iPhone 
sites and the tools you can use to build them. After a 
walk through storyboarding an iPhone Web app as a 
concept and developing it together, you will be ready 
to extend your site to the iPhone with confidence. 

705 • Unit Testing That Doesn't Suck 
By Saul Mora 

Unit testing in Cocoa has traditionally been a dif- 
ficult task, with little to no benefit. The built-in tools 
and framework Apple provides aren't as helpful as 
they should be, so we'll talk about some unit testing 
tools and methodologies that don't suck. Get unit 
tests integrated and running against your existing 
iPhone, iPad and Cocoa-based apps, and see how to 
get the most out of your testing by using processes 
you've seen in other development environments. 

706 • Building an iPhone 

Publishing House 
By Michel Kripalani 

Learn about the ins and outs of the iPhone app 
development process and how to build a premiere 
publishing brand in less than one and a half years. 
This session is presented as a case study by Ocean- 
house Media, which has over 85 apps in the App 
Store. They have major licenses in place with Dr. 
Seuss, Hay House Publishing and others, and have 
had numerous apps reach the Top 10 and Top 100 
paid charts. On average, their apps are rated 4.5 out of 
5.0 stars across the board. 

You'll learn: 

• How the App Store model compares to the 
traditional video-game model 

• How to secure a major license deal, such as with 
Dr. Seuss and Hay House 

• How many apps you need to have a sustainable 
business on the App Store 

• Which marketing strategies work — and which 
do not 

• The importance of ratings — and how to 
improve them 

• What is the relationship between pricing and 
sales volume? Pricing and ratings? 

• What software tools are the most important for 
iPhone publishers? 

The talk will be inspirational, motivational and 
loaded with take-away items. 
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802 • Mastering the External 

Accessory Framework 
By Michael Gile 

You can interface your apps directly to custom 
hardware devices via the External Accessory Frame- 
work. In this session, you will receive an overview of 
the Made for iPhone/iPod licensing program, what 
it means to build and ship an authorized Apple 
accessory (within Apple NDA limits), and a live 
demonstration of a custom car diagnostic device 
designed to allow your iPhone to talk directly to 
your car's On-Board Diagnostics (OBD-2) port. 

This demonstration will walk you through a 
sample Xcode project to illustrate the use of the 
External Accessory Framework, and will show how 
to setup and communicate with the diagnostic 
accessory device connected via the 30-pin iPhone 
dock connector. 

803 • Creating an Easy-To-Use 

Objective-C Modular Framework 
By Lee Barney 

The Model-View-Control pattern as implement- 



ed by Apple is great as far as it goes. It does tend to 
lead to implementation code being scattered 
across many areas of your application. 

This class helps you design and implement a 
modular, reusable framework that can speed up 
you application development dramatically. Initial 
data indicates you could reduce your time to mar- 
ket by a factor or 1 or more by reusing the frame- 
work you will create in this class. 

You will create a command-response, highly 
modular framework that you can reuse in every 
iPhone, iPad and even Mac application you ever cre- 
ate. Your framework will be fast. It will be small. It 
will even be easy to use! 

804 • Advanced Core Data: 

Importing and Exporting Data 

Efficiently 
By Marcus Zarra 

In this session, we will be discussing the 
impacts of importing and exporting on iPhone 
usability. Specifically, we will review the issues 
with single threaded vs. multi-threaded importing 
and exporting. 

We will review the best practices of importing 



data into a Core Data store using Cocoa Touch while 
maintaining a balance between user experience 
and performance. 

We will also review how to handle an export from 
Core Data using Cocoa Touch and multithreading. 

Finally we will review some performance tips, 
tricks and traps to be aware of while developing a 
Core Data application for Cocoa Touch. 

805 • Developing Effective 

Enterprise Smartphone Apps 
By Adam Blum 

Driven by the phenomenal success of the 
iPhone and the App Store, smartphone app usage is 
finally taking off in the enterprise. Yet many devel- 
opers are still uncertain about how to create a great 
user experience for information-intensive business 
apps on smartphones. 

In this session, you'll learn the general principles 
of creating compelling smartphone apps for busi- 
nesses, and what the key differentiators are between 
business and consumer apps. For each principle, we 
will show flagrant violations from existing apps on 
the iPhone App Store as well as apps that follow the 
proper guidelines, creating an optimal user experi- 
ence. Come away knowing how to create an app 
that follows best practices and guidelines, driving 
user adoption and customer satisfaction. 



Speaker Bios 




Chris Bannon is familiar with 
many acronyms: UX, ASP.NET, AJAX, 
C#, SQL and jQuery. As the Lead 
Web Developer at ComponentOne, 
he has mastered techniques such as 
CSS layout, unobtrusive JavaScript, 
semantic markup and progressive enhancement. 
Chris currently manages ComponentOne's Dev 
Tools for ASP.NET and iPhone Web development. He 
spends most of his time building or using the Web 
and traveling to share his passion with others. Chris 
has been a speaker at the Microsoft campus, 
DevConnections and at various Code Camps in 
South Florida, Philadelphia and Pittsburgh. 

Lee S. Barney is the creator of the 
QuickConnectFamily framework for 
JavaScript-based cross-platform 
hybrid applications and a professor 
in the Computer Information Tech- 
nology Department at Brigham 
Young University, Idaho. He served as CIO/CTO of 
@HomeS oft ware, a company that produced Web- 
based, mobile data and scheduling applications for 
the home health care industry. He is the author of 
Developing Hybrid Applications for the iPhone. 





Jeff Biggus is the founder of 
HyperJeff, Inc. and cofounder of Big 
Stone Phone, producing Unix, Mac, 
iPhone and iPad apps, and custom 
in-house software for companies 
specializing in physics and math 
software. He has been an independent program- 
ming consultant for more than 1 5 years. Jeff created 
the HyperJeff Network in 1994, a site serving the 
Mac OS X community since Rhapsody. The site 
serves up an ad-free list of Mac apps and the largest 
database of Cocoa articles on the Web. Current hob- 
bies include mathematical physics, an original Web 
framework system, and experiments in Web serving. 

Jonathan Blocksom is an inde- 
pendent software developer spe- 
cializing in 3D graphics, and is the 
author of the award winning Gol- 
lyGee Blocks, a 3D modeler for chil- 
dren. Jonathan has worked with 
OpenGL since it was just gl and is currently 
employed by Google in Washington, DC. 





Adam Blum is CEO of Rhomobile. 
Formerly the Senior Director of 
Engineering at Good Technology, he 
led the Server Engineering efforts, 
including the development of 
GoodAccess, the first offline and 
asynchronous-oriented Web browser for mobile 
devices. Adam's experience at Good Technology 
demonstrated to him the need for a framework that 
would help enterprises build mobile applications 
easily and cost-effectively, without having to devel- 
op applications from scratch for multiple platforms. 

Nitin Chitkara is the Vice Presi- 
dent of Business Development at 
Mobclix, where he is responsible for 
the company's publisher and devel- 
oper relationships. Nitin has exten- 
sive experience in mobile applica- 
tion development, design and marketing. He was a 
senior member of Moviso's BREW development 
team. Prior to Mobclix, Nitin was a senior manager 
in PayPal's user experience group, where his pri- 
mary focus involved market assessment, usability 
optimization and market-entry strategy. 




9 • Sept. 27-29, 201 • Hyatt Regency Aventine • San Diego, Calif. • wvv.iphonedevcon.com 



iPhone/iPad 
DevCon20lO 



Speaker Bios 




Bobby Emamian is the cofounder 
and CEO at Prolific Interactive, a 
new-media agency specializing in all 
things digital. With a tech and social 
media background, he has propelled 
his company into working with big 
brands looking to maximize their digital presence. 
Bobby has made several appearances on panels in 
Connecticut speaking about the power of social 
media. Having worked on social media sentiment 
analysis software in the past, Bobby understands 
and utilizes social media for his company and 
clients. Bobby is also the founder of New Media 
Haven. 

Nathan Eror is living the dream as 
the founder of iPhone and iPad 
I game studio Free Time Studios. He 
has been building iPhone apps since 
the initial release of the SDK, and is a 
regular speaker at iPhone developer 
conferences in the U.S. and Europe. He lives in Hous- 
ton, where he is the co-organizer of the iPhone 
Developer Meetup group and iPhoneDevCamp 
Houston. Nathan is also very active in the local soft- 
ware development community and the high-tech 
startup scene. 

Noah Gift is the coauthor of 
"Python For Unix and Linux System 
Administration" by O'Reilly. He is 
an author, speaker, consultant and 
community leader, writing for pub- 
lications such as IBM Develop- 
erWorks, Red Hat Magazine, O'Reilly, 
MacTech and Manning. His consulting company, 
Giftcs, provides solutions for Python development 
and systems engineering. Noah is currently coau- 
thoring a book on Google App Engine and writing 
a large Google App Engine exercise- and nutrition- 
tracking application. Most recently, he worked as a 
Python programmer for Weta Digital in New 
Zealand, which has one of the world's largest ren- 
der farms. Noah is also the former organizer for 
PyAtl, which is the Python User Group for Atlanta. 
He has given presentations at PyCon and PyAtl. 

Michael Gile is founder of 
I FuzzyLuke, a Houston startup build- 
ing mobile automotive diagnostic 
solutions, including the FUZZYCar 
iPhone application. Michael has 
been a software and security engi- 
neer for over 10 years, working mostly in startups 
and small companies. Prior to founding FuzzyLuke, 






Michael worked extensively in mobile, Web and 
embedded software development. 

Danny Goodman is the author of 
45 books (and counting) on com- 
puting and Internet technologies. In 
the community of World Wide Web 
j^fek^-' ^8 developers, he is well known for 
^Htv F^V numerous bestselling book titles, 
including "JavaScript Bible" (Wiley), "Dynamic HTML: 
The Definitive Reference" (O'Reilly) and JavaScript & 
DHTML Cookbook" (O'Reilly). Danny's nearly 30- 
year writing career has generated many successful 
book and software-development projects covering 
popular client-side scripting languages (HyperTalk, 
AppleScript and JavaScript). During this time, 
Danny has been a speaker and instructor at numer- 
ous conferences in North America, Europe, Asia and 
Australia. He began his transformation from scripter 
to native app developer in 2008, and has published 
iPhone SDK apps for the News, Utilities and Photog- 
raphy categories in the Apple App Store. 

Jen Gordon is the owner of Clever 
Twist, an interactive design studio 
specializing in iPhone app design 
■ and development. Jen lives and 
jra ^33 breathes ideas and design. Her 
** ^ seven years of experience in Interac- 

tive Design and Art Direction for top brands 
spawned the idea for Clever Twist — a premier 
provider of engaging and addictive apps that turns 
"ordinary" on it's head. Her goal is client happiness 
(including periodic back scratches), really pretty 
design and wonderfully usable interfaces. 

Jeff Haynie is cofounder and CEO 
of Appcelerator. Jeff is a long-time 
serial entrepreneur, technologist 
% and blogger. Previously, Jeff was 
I cofounder and CTO of Vocal ocity, a 
^d v 1 P software provider in the communi- 
cations arena, and before that, CTO of 
eHatchery, a digital incubator and offshoot of Bill 
Gross' idealab. Jeff has worked on numerous stan- 
dard committees such as IETF and W3C, as well as 
being a core contributor to a number of important 
open-source technologies such as JBoss and 
OpenVXI. Jeff served with distinction in the U.S. 
Navy. 






Aaron Hillegass is the CEO of Big 

_ Nerd Ranch, which he founded in 
2001. He started programming at 
the age of 1 in the basement of the 
Oregon Museum of Science and 
Industry. He was a a developer train- 
er at NeXT in 1995-1997. NeXT was bought by 
Apple, so he left in June of 1997 to create 
ClassMAX.com, the search engine for classes and 
seminars. After leaving ClassMAX during the late 
1990s, Aaron went on to become one of the best 
WebObjects programmers on the planet; he was 
especially known for his skill deploying WebObjects 
applications. In 2000 Aaron was asked to teach 
Apple engineers how to write apps for Mac OS X. 

In 2007, MacTech named Aaron one of the top 
25 most influential people in the Mac community. 
An accomplished speaker, Aaron has lectured at 
Apple's Worldwide Developer Conference (WWDC), 
ApacheCon, and C4. He also gave the keynote at the 
"Voices That Matter" iPhone Developers Conference 
in 2009. 

Aaron is also a best selling author. "Cocoa Pro- 
gramming for Mac OS X"was published in December 
of 2001. "Cocoa Programming," now in its third edi- 
tion, is widely considered the Bible in the industry. He 
is also the co-author of "Core Mac OS X Program- 
ming," which was later renamed "Advanced Mac OS 
Programming." 

Michel Kripalani is President of 
Oceanhouse Media, publisher of 
mobile apps that uplift, educate and 
inspire. Oceanhouse Media is a 
major player in the iPhone and iPad 
space with an offering of over 85 
apps, numerous bestsellers and proprietary tech- 
nology. Licensing relationships are in place with Dr. 
Seuss Enterprises, Hay House Publishers and others. 
A veteran of the video-game industry, Michel 
founded Presto Studios in 1991. Presto Studios had 
numerous hits including The Journeyman Project 
series, Myst 3: Exile and more. Michel was also Direc- 
tor of Business Development at Autodesk for many 
years, where he spent a large portion of his time 
managing relationships with Microsoft, Sony, Nin- 
tendo and independent game development stu- 
dios worldwide. 
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Mike Lee, the world's toughest 
programmer, is the founder and 
CEO of United Lemur, a philanthrop- 
ic revolution disguised as a software 
company. Mike also cofounded 
Tapulous, whose titles include Tap 
Tap Revenge and Twinkle. Prior to iPhone, Mike cut 
his teeth and won an Apple Design Award at Seat- 
tle-based Delicious Monster Software. Mike is origi- 
nally from Honolulu, is a popular blogger and occa- 
sional pundit, and has been seen on twitter as bmf. 
His last known day job was as a Senior Engineer at a 
very large company in Cupertino marketing magi- 
cal products. 

B Griffin McGrath is a researcher 
who specializes in entrepreneurship 
and innovation research and prac- 
tice. He is focused on revolutionizing 
online higher education as well as 
the pursuit of excellence in entrepre- 
neurship. Griffin specializes in creating strong busi- 
ness plans and innovative venture ideas that will 
solve problems and fill specific niches in many mar- 
kets, including social networking, mobile applica- 
tions and higher education. Griffin is no stranger to 
strategic management and innovation. He spent 
four years as a student of entrepreneurship and as 
a competitor in business-plan competitions on the 
state level, with several winning ventures. Griffin 
leverages these successes and coaches undergrad- 
uates participating in collegiate business-plan 
competitions. 

Saul Mora has coded in several 
languages prior to arriving in Objec- 
tive-C. He has a background in C#, 
Java and Ruby. He is also the Found- 
ing Panda at iPhone Development 
firm Magical Panda Software, work- 
ing on custom iPhone development consulting 
projects. 

Joe Pezzillo is the cofounder of 
Push 10 LLC and the founder of 
Metafy LLC, a Boulder, Colo.-based 
software boutique currently devel- 
oping a suite of prototype iPhone 
applications for a Fortune 1 00 finan- 
cial services company. In addition to pioneering 
work in Internet radio and managing several start- 
ups, Joe spent three years as a researcher at the 
Apple Electronic Media Lab in the mid 90s. 

B Jonathan Saggau is the founder 
and CEO of Sounds Broken Inc., a 
growing Mac OS X and iPhone soft- 
ware contracting shop as well as a 
technical and business process con- 
sultancy. When he's not flying air- 
planes or reverse-engineering hardware and soft- 






ware, he works with clients such as Fileblaze, top- 
sOrtho, Vertitron, Equity Audio and the Big Nerd 
Ranch to develop outstanding products, services 
and processes. Jonathan he has written on software 
development for Apress and IBM DeveloperWorks. 
He holds Bachelor's and Master's degrees in Music 
Composition. He blogs at jonathansaggau.com/ 
blog and can be followed on twitter @jon marimba. 

Ben Scheirman is a developer 
from Houston. As Director of Devel- 
opment at ChaiONE, Ben oversees 
development of iPhone projects as 
well as Web applications in Ruby on 
Rails and .NET. Ben is a Microsoft 
MVP, ASP Insider and Certified 
ScrumMaster. Ben has spoken at numerous user 
groups and conferences for .NET and Ruby, and has 
coauthored two books for ASP.NET MVC. His first 
iPhone application was featured in the New & Note- 
worthy section of the iTunes App Store, and he has 
been enjoying iPhone programming ever since. You 
can find Ben online at his blog (flux88.com) or on 
Twitter (twitter.com/subdigital). 

P*flk Michael Schneider left Silicon 

Valley technology law firm Wilson 

I Sonsini Goodrich & Rosati at the 

| beginning of 2009 to found 

,A I HiveBrain Software. HiveBrain pub- 

™ ' ^^ lishes a variety of applications on 

the iTunes App Store, the most notable of which, 

TouchType, peaked at #13 in the U.S. App Store. 

HiveBrain most recently has been focused on the 

Andrew Johnson series of self-help applications, 

which are published in a variety of categories on 

the iPhone and Android app stores. 

Michael continues to practice law under the 
name Bitwise Legal, focusing on software and inter- 
active media clients. He is also co-author of the 
book The Business of iPhone App Development: 
Making and Marketing Apps that Succeed, pub- 
lished by Apress. 

Daniel Steinberg has spent the 
last three decades programming 
the iPad. OK, he hasn't. But he's been 
programming the iPhone and the 
iPad since the SDK's first appeared in 
beta and is co-author of the book 
"iPad Programming" from the Pragmatic Program- 
mers and author of their book "Cocoa Program- 
ming". Daniel presents iPhone and Cocoa training 
for the Pragmatic Studio and consults through his 
company Dim Sum Thinking. When he's not coding 
or talking about coding for the Mac, the iPhone, and 
the iPad he's probably cooking or hanging out with 
his wife and daughter. 







Robert Strojan is the founder and 
lead iPhone developer at Blackout 
Labs. He has developed multiple 
applications appearing in theTop 20 
Paid Music charts, and his apps have 
V n. been featured in prominent media 
outlets like BET and the ChicagoTribune. Robert has 
also consulted major pro audio manufacturers 
regarding their iPhone product lines, and published 
articles in iPhone Life Magazine and Mobile 
Orchard. 

Pete Tenereillo is founder and CEO 
of Trapster.com. Trapster is world's 
largest and most active driver's 
social network. It allows drivers to 
share in real time the location of not 
only police enforcement points and 
cameras, but accidents, traffic jams, and other road- 
way hazards. Trapster is one of the most down- 
loaded navigation application on most smart- 
phones. Prior to Trapster, Pete was co-inventor/ 
developer of Cisco's PIX Firewall, the first server load 
balancer, and other related technology. He is an 
inventor of record on 12 U.S. patents. 

Marcus Zarra is the owner of 
Zarra Studios, where he builds Mac, 
iPhone and iPad software for a wide 
variety of clients and customers. 
Outside of Apple, there are very few 
people with a better understanding 
of Core Data than Marcus. He has not only written 
the book on Core Data, he has also been doing 
iPhone, and now iPad, development as long as it 
has been possible to do so, and Mac programming 
for longer than that. With Matt Long, Marcus is the 
coauthor of the popular programming blog Cocoa 
Is My Girlfriend. Marcus and Matt also wrote "Core 
Animation: Simplified Animation Techniques for 
Mac and iPhone Development" (Addison-Wesley). 
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Gottd Get Approval??? Try These Time-Honored Tactics! 



1. STUDY. Note the classes and workshops at 
IPhone/iPad DevCon focused in four main areas: 
development essentials, adopting applications 
for the iPad, linking iPhone/iPad apps to enter- 
prise systems, and marketing your apps more 
effectively through the App Store. 

2. PREPARE. Go in armed with all the neces- 
sary materials to make a good case. Download 
the course catalog and circle the classes you 
want to take, and explain why the topics relate to 
your iPhone and iPad development efforts. 




3. TEACH. Promise to come back from 
IPhone/iPad DevCon and hold a brown-bag 
lunch session to share what you've learned with 
your colleagues. 

4. EXPLAIN. The iPhone/iPad market is RED 
HOT and your company will be rewarded by not 
waiting around — get going on those mobile 
apps today! 

5. SAVE. The sooner you register, the more you 
save, so explain the benefit of signing up early. 

6. TEAM. Save even more with group dis- 
counts. Send 3 or more employees from your 
company, and save $100 off per person. Each 
person can take different classes and bring back 
even more valuable tips and techniques. 



7. CHOOSE. There are 4-6 classes or work- 
shops offered in each time slot. That means that 
you'll always find something that fits your needs 
and is at just the right level for your own iPhone 
development knowledge and requirements. 

8. MEET. Seize the opportunity to work with 
iPhone experts — experts who have real-world 
experience. 

9. DECIDE. While you can sign up anytime, 
your company will save the most if you beat the 
extreme Early Bird, Super Early Bird and Early 
Bird deadlines. Help your company's bottom line 
by signing up today! 



Hotel and Travel Information 



Hyatt Regency La Jolla at Aventine 

3777 La Jolla Village Drive, 
San Diego, California, USA 92122 
Tel: +1.858.552.1234 
Fax: +1.858.552.6066 

Reservations 

Discounted room rates for iPhone/iPad DevCon 
attendees are US$139 per night for single/double 
occupancy. This rate is available from September 
26, 2010 (check-in) through September 29, 2010 
(check-out). 

Reservations must be made by 

September 14,2010 
to receive the discounted rate. 

For those who reserve their hotel rooms from our 
room block online at 
www.iphonedevcon.com/hoteltravel.html, 

they will receive: 

• Complimentary wireless internet service 
in their rooms. 

• Discounted self-parking reduced to $15.00 per day. 




Hotel Highlights 



Located in the city known as "The Jewel of the Pacif- 
ic", our stunning La Jolla hotel offers incomparable 
beaches, shopping, dining, galleries and attractions. 
Visit Stephen Birch Aquarium & Museum, spend a 
day kayaking, take a Baja Lobster or Wine tour, see 
live theater or shop San Diego's trendy boutiques; 
all just minutes away. 

Set on 1 1 prime acres, our convenient La Jolla 
California hotel boasts 41 9 guestrooms, a 32,000 sq. 
ft. Sports Club and spa, gourmet restaurant row, 
and 32,000 sq. ft. of function space. Be our guest, 
and enjoy the abundant riches of San Diego's "Gold- 
en Triangle" at our luxury hotel in La Jolla, California. 



Transportation 

Airport: 

• San Diego International Airport/Lindberg Field 

Express Shuttle or Cloud 9 Shuttles: 

• Cost: Approx $15.00 one way per person (subject 
to change) 

• Seating/Luggage: 2 pieces of luggage per person 

• Outside of Baggage claim area 

Taxi: 

• Cost: Approx $35-45 

• Seating/Luggage: 2 pieces of luggage per person 

• Pick Up: Outside of Baggage claim area 
Maximum seating: 

• Shuttles seat 10 people, taxi 2-8 people 

Driving Directions 

From San Diego Int'l Airport (10 miles): Turn left on 
Harbor Drive, then left again on Laurel. Follow signs 
to I-5 North. Exit at La Jolla Village Drive and turn 
right. Turn right again at Lebon. Turn right on 
University Center Lane. 
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Pricing and Registration RegisterOnlineatwww.iphonedevcon.com 



Register By 



extreme Early 
Bird Rate 


Super Early 
Bird Rate 


Early Bird 
Rate 


Bird 
Rate 


Full 
Price 


Fri.June 18 


Fri.,July30 


Fri., Aug. 27 


FrL, Sept. 1 7 


After Sept. 1 7 



Three-Day Full Event Passport 

Spetember 27-29, 2010 




$845 
BEST VALUE! 


$945 


$995 
SAVE 400! 


$1,065 


$1395 


Two-Day Technical Conference 

Spetember 28-29, 2010 


Only 


$725 


$795 


$825 


$895 


$1,195 


One-Day Workshops Only 

Spetember 27, 2010 




$595 


$675 


$725 


$785 


$895 


Exhibit Hall Only 

Spetember 28, 2010 




$50 


$50 


$50 


$50 


$50 

All fees are in US$. 



Three-Day Full Event Passport 
Registration Includes: 

• Admission to workshops and technical classes 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to all special events, including the 
Attendee Reception 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

Two-Day Technical Conference Only 
Registration Includes: 

• Admission to technical classes 

• Admission to keynotes 

• Admission to Exhibit Hall 

• Admission to special events on September 28-29, 
including the Attendee Reception 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

One-Day Workshops Only 
Registration Includes: 

• Admission to workshops 

• Admission to special events on September 27 

• Downloadable conference materials 

• Continental breakfast, coffee breaks, and lunch 
where indicated 

Exhibit Hall Only Registration 
Includes: 

• Admission to Exhibit Hall 

• Admission to Attendee Reception 




HOW TO REGISTER 

Register online and use one of the following pay- 
ment methods: 

Credit Card. You can use the secure online form to 
pay via credit card and get immediate confirma- 
tion of your registration. MasterCard, Visa and 
American Express are accepted. You'll receive a 
REGISTRATION RECORD and RECEIPT. Please print 
out these pages and bring them with you to the 
Conference. Present them at the Registration Desk 
to pick up your badge and course materials. 

Check. Fill out the online registration form. Print 
out the REGISTRATION RECORD and RECEIPT and 
mail to BZ Media LLC, 7 High Street, Suite 407, 
Huntington, NY 1 1743, with your payment. Online 
registrations that are mailed without payment will 
not be confirmed until payment is received. 

Purchase Order. If you register using a P.O., you'll 
be invoiced immediately for the registration 
amount. Payment must be received before your 
registration can be confirmed. 

SPECIAL DISCOUNTS 

You may combine one of these special discounts 
with the Early Registration pricing to save even 
more! 

Group. Get an additional $100 off per person if you 
register 3 or more people from one company for 
the Full Event Passport. Use the "Add another per- 
son" option during the online registration process. 

Government. Federal, State and Local Government 
employees can receive an additional $100 off 
the Full Event Passport price. Enter code GOV in 
discount code field. 



Educational Institutions. Personnel employed by or 
attending educational institutions can get a $100 
discount off the Full Event Passport price by using 
the code EDU. 

User Groups. Contact Ted Bahr, ted@bzmedia.com 
to see if your group is eligible for a discount. 

Non-Profit Organizations. Personnel employed by 
non-profit organizations can get a $100 discount 
off the Full Event Passport price by using the code 
NONPROFIT. 

CANCELLATION AND REFUND POLICY 

You can receive a full refund, less a $150 registra- 
tion fee, for cancellations made by Friday, August 
20, 2010. Cancellations after this date are non- 
refundable. Send your cancellation in writing to 
sadler@bzmedia.com. Registrations may be trans- 
ferred to another person. 

PRESS PASSES 

BZ Media welcomes qualified members of the 
press and technology analysts community to its 
events. Click here to review our press pass policy. 
To register as press, sign up online and choose 
"Press" under "Registration Type". 

QUESTIONS 

Contact Stacy Burris, Event Director at 
sburris@bzmedia.com or +1-631-421-41 58 x1 08. 
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